|
cve-2026-102756
|
|
DataEase bar-horizontal Axis Label Tooltip Stored Cros…
|
dataease
|
dataease
|
2026-10-14T18:44:42.811Z |
2026-10-20T01:53:42.428Z |
|
cve-2026-100406
|
|
dbt: Unauthenticated Arbitrary SQL Execution in `dbt d…
|
dbt-labs
|
dbt-core
|
2026-10-14T18:27:24.863Z |
2026-10-20T01:51:20.549Z |
|
cve-2026-73260
|
|
Mongoose: Out-of-bounds Read via length-counter underf…
|
cesanta
|
mongoose
|
2026-10-14T18:25:00.518Z |
2026-10-20T01:50:00.898Z |
|
cve-2026-103043
|
8.7 (v4.0)
7.5 (v3.1)
|
anchorme through 3.0.8 Regular Expression Denial of Service
|
alexcorvi
|
anchorme
|
2026-09-29T22:51:02.576Z |
2026-10-20T01:48:52.543Z |
|
cve-2026-55167
|
|
LDAP Account Manager: WebAuthn authentication challeng…
|
LDAPAccountManager
|
lam
|
2026-10-14T18:23:26.148Z |
2026-10-20T01:48:49.540Z |
|
cve-2026-54554
|
|
FOG adInfo endpoint is reported to disclose the Active…
|
FOGProject
|
fogproject
|
2026-10-14T18:08:03.179Z |
2026-10-20T01:47:46.473Z |
|
cve-2026-81029
|
8.5 (v4.0)
8.1 (v3.1)
|
OpenMetadata before 2.0.0 JWT Disclosure via Unvalidat…
|
open-metadata
|
OpenMetadata
|
2026-08-26T15:44:57.988Z |
2026-10-20T01:46:57.584Z |
|
cve-2026-109527
|
|
Model Context Protocol Python SDK HTTP and OAuth endpo…
|
modelcontextprotocol
|
python-sdk
|
2026-10-14T17:52:35.943Z |
2026-10-20T01:46:47.584Z |
|
cve-2026-92150
|
|
F´: GenericHub Malformed Buffer Assertion DoS
|
nasa
|
fprime
|
2026-10-14T17:18:29.342Z |
2026-10-20T01:43:37.467Z |
|
cve-2026-92157
|
|
F´: FileDownlink SendPartial integer overflow lets leg…
|
nasa
|
fprime
|
2026-10-14T17:09:20.199Z |
2026-10-20T01:42:27.964Z |
|
cve-2016-15060
|
|
PCMan FTP Server PORT buffer overflow
|
PCMan
|
FTP Server
|
2026-10-14T16:30:08.738Z |
2026-10-20T01:40:54.990Z |
|
cve-2026-77524
|
|
KEDA: Privilege escalation from namespace admin to clu…
|
kedacore
|
keda
|
2026-10-14T16:15:15.268Z |
2026-10-20T01:39:03.661Z |
|
cve-2026-102695
|
|
OmniFaces: Forged combined-resource IDs and related ou…
|
omnifaces
|
omnifaces
|
2026-10-14T15:58:43.159Z |
2026-10-20T01:38:15.296Z |
|
cve-2026-110735
|
2.5 (v3.1)
|
Godot Engine through 4.7.2 has a heap out-of-boun…
|
godotengine
|
Godot Engine
|
2026-10-14T15:41:50.110Z |
2026-10-20T01:36:20.303Z |
|
cve-2026-91157
|
|
Discourse: Media uploads remain publicly accessible af…
|
discourse
|
discourse
|
2026-10-14T15:37:02.240Z |
2026-10-20T01:35:25.492Z |
|
cve-2026-91159
|
|
Discourse: Stored oEmbed HTML injection via allowed iframe
|
discourse
|
discourse
|
2026-10-14T15:30:14.190Z |
2026-10-20T01:33:56.005Z |
|
cve-2026-101896
|
|
Angular: Denial of Service via Numeric URL Matrix Para…
|
angular
|
angular
|
2026-10-14T15:05:42.934Z |
2026-10-20T01:32:46.385Z |
|
cve-2026-110719
|
6.9 (v4.0)
7.2 (v3.1)
|
Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-po…
|
Portkey-AI
|
gateway
|
2026-10-14T15:01:32.488Z |
2026-10-20T01:31:03.469Z |
|
cve-2026-110714
|
7.1 (v4.0)
6.5 (v3.1)
|
libsmb2 through 6.2 Heap Out-of-Bounds Read via decode…
|
sahlberg
|
libsmb2
|
2026-10-14T15:01:29.077Z |
2026-10-20T01:29:23.174Z |
|
cve-2026-110659
|
6.8 (v4.0)
5.5 (v3.1)
|
ELFIO through 3.12 NULL Pointer Dereference via reloca…
|
serge1
|
ELFIO
|
2026-10-14T15:01:25.207Z |
2026-10-20T01:27:15.189Z |
|
cve-2026-110654
|
6.9 (v4.0)
6.1 (v3.1)
|
libzvbi through 0.2.45 Out-of-Bounds Write via Teletex…
|
zapping-vbi
|
libzvbi
|
2026-10-14T15:01:21.898Z |
2026-10-20T01:26:18.324Z |
|
cve-2026-110646
|
9.2 (v4.0)
8.1 (v3.1)
|
Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injec…
|
beganovich
|
snappdf
|
2026-10-14T14:17:15.120Z |
2026-10-20T01:24:42.053Z |
|
cve-2026-110641
|
8.7 (v4.0)
8.8 (v3.1)
|
@runnerty/executor-decompress through 3.1.1 OS Command…
|
runnerty
|
@runnerty/executor-decompress
|
2026-10-14T14:17:11.966Z |
2026-10-20T01:23:08.052Z |
|
cve-2026-110636
|
9.3 (v4.0)
9.8 (v3.1)
|
pypdftk through 0.5 OS Command Injection via PDF and O…
|
revolunet
|
pypdftk
|
2026-10-14T14:17:08.465Z |
2026-10-20T01:21:31.597Z |
|
cve-2026-110631
|
9.3 (v4.0)
9.8 (v3.1)
|
Komodo through 2.3.3 Periphery Agent Unauthenticated R…
|
moghtech
|
komodo
|
2026-10-14T14:17:05.199Z |
2026-10-20T01:20:12.584Z |
|
cve-2026-110626
|
5.1 (v4.0)
6.1 (v3.1)
|
ClipBucket v5 through 5.5.3-#206 Reflected XSS via edi…
|
MacWarrior
|
clipbucket-v5
|
2026-10-14T14:17:01.968Z |
2026-10-20T01:17:40.484Z |
|
cve-2026-110621
|
8.7 (v4.0)
8.8 (v3.1)
|
Swetrix Cloud before 5.1.0 Missing Authorization via P…
|
Swetrix
|
swetrix
|
2026-10-14T14:16:58.557Z |
2026-10-20T01:15:55.134Z |
|
cve-2026-110616
|
9.2 (v4.0)
8.1 (v3.1)
|
NullHub through 2026.5.29 Missing Authentication for /…
|
nullclaw
|
NullHub
|
2026-10-14T14:16:55.237Z |
2026-10-20T01:14:30.401Z |
|
cve-2026-110611
|
6 (v4.0)
5.9 (v3.1)
|
REBUILD through 4.5.0 Authorization Bypass via aibot2 …
|
getrebuild
|
rebuild
|
2026-10-14T14:16:51.948Z |
2026-10-20T01:10:36.770Z |
|
cve-2026-110606
|
4.8 (v4.0)
3.3 (v3.1)
|
LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds …
|
LibreCAD
|
libdxfrw
|
2026-10-14T14:16:46.382Z |
2026-10-20T01:07:40.851Z |