|
cve-2026-101069
|
|
dbgate Export databaseConnections.js exportModelSql pa…
|
n/a
|
dbgate
|
2026-09-28T13:00:15.299Z |
2026-09-28T14:38:14.052Z |
|
cve-2026-59563
|
4.6 (v3.1)
|
HMAC Confirmation Token Unbinding in zscaler-mcp-server
|
Zscaler
|
zscaler-mcp-server
|
2026-09-28T12:54:52.446Z |
2026-09-28T13:31:27.587Z |
|
cve-2026-101068
|
|
dbgate Create Connection Endpoint zipJsonLinesData.js …
|
n/a
|
dbgate
|
2026-09-28T12:45:13.230Z |
2026-09-28T13:21:52.543Z |
|
cve-2026-101292
|
8.2 (v3.1)
|
Artemis-core-client: unsafe reflection in apache activ…
|
Red Hat
|
Red Hat JBoss Enterprise Application Platform 7.4.25
|
2026-09-28T12:44:28.269Z |
2026-11-03T13:03:12.314Z |
|
cve-2026-82323
|
8.1 (v3.1)
|
Improper Authorization in Enocta Educational's Enocta …
|
Enocta Educational Technologies Inc.
|
Enocta Platform
|
2026-09-28T12:36:20.110Z |
2026-09-28T13:31:27.720Z |
|
cve-2026-82326
|
4.1 (v3.1)
|
HTML Injection in Enocta Educational's Enocta Platform
|
Enocta Educational Technologies Inc.
|
Enocta Platform
|
2026-09-28T12:33:57.124Z |
2026-09-28T13:31:27.844Z |
|
cve-2026-18825
|
5.3 (v4.0)
|
Origin validation error in the connect-xcors npm package
|
github.com/antono
|
connect-cors
|
2026-09-28T12:32:17.883Z |
2026-10-05T08:18:27.986Z |
|
cve-2026-101067
|
|
dbgate save-uploaded-file Endpoint files.js saveUpload…
|
n/a
|
dbgate
|
2026-09-28T12:30:14.890Z |
2026-10-01T14:16:00.664Z |
|
cve-2026-12265
|
8.8 (v3.1)
|
Missing Authorization on HA Failover Config allows Com…
|
Zohocorp
|
DDI Central
|
2026-09-28T12:22:02.936Z |
2026-09-28T13:22:47.541Z |
|
cve-2026-86330
|
7.2 (v3.1)
|
Noobaa-core: noobaa-core: os command injection in clus…
|
Red Hat
|
Red Hat Openshift Data Foundation 4
|
2026-09-28T12:18:30.375Z |
2026-09-30T20:11:12.424Z |
|
cve-2026-101066
|
|
dbgate Archive Link Creation archive.js createLink pat…
|
n/a
|
dbgate
|
2026-09-28T12:15:13.877Z |
2026-09-28T12:47:06.737Z |
|
cve-2026-82936
|
5.9 (v4.0)
|
Denial of Service in mH-DEVELOPER
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:12:28.246Z |
2026-09-28T13:31:28.116Z |
|
cve-2026-82935
|
6.9 (v4.0)
|
Use of End-of-Life components in mH-DEVELOPER
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:12:21.990Z |
2026-09-28T13:31:28.241Z |
|
cve-2026-82933
|
6 (v4.0)
|
Cleartext Transmission of Sensitive Information in mH-…
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:12:13.580Z |
2026-09-28T13:31:28.368Z |
|
cve-2026-82932
|
5.3 (v4.0)
|
Missing Firewall Configuration in mH-DEVELOPER
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:12:06.439Z |
2026-09-28T13:31:28.496Z |
|
cve-2026-82930
|
6.4 (v4.0)
|
Missing Authentication in mH-DEVELOPER
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:11:59.764Z |
2026-09-28T13:31:28.622Z |
|
cve-2026-82929
|
6.3 (v4.0)
|
Use of Shared Cryptographic Key in mH-DEVELOPER
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:11:47.280Z |
2026-09-28T13:31:28.766Z |
|
cve-2026-82928
|
7.7 (v4.0)
|
Undocumented access path in mH-DEVELOPER
|
F&F Filipowski
|
mH-DEVELOPER
|
2026-09-28T12:11:40.726Z |
2026-09-28T16:32:28.919Z |
|
cve-2026-101055
|
|
Thinkware U3000 TCP Service GET_STATUS information dis…
|
Thinkware
|
U3000
|
2026-09-28T12:00:13.984Z |
2026-09-28T13:24:09.474Z |
|
cve-2026-12264
|
8.8 (v3.1)
|
Authenticated File Write via HA Failover Config Upload…
|
Zohocorp
|
DDI Central
|
2026-09-28T11:51:50.272Z |
2026-09-28T15:07:59.748Z |
|
cve-2026-101054
|
|
Thinkware U3000 TCP Service wpa_supplicant.conf get_fi…
|
Thinkware
|
U3000
|
2026-09-28T11:45:09.155Z |
2026-10-01T14:15:07.267Z |
|
cve-2026-78424
|
8.8 (v3.1)
|
OS Command Injection in Packet-Capture (Sniffer) Filte…
|
SUSE
|
NeuVector
|
2026-09-28T11:44:05.235Z |
2026-09-29T03:55:17.618Z |
|
cve-2026-19444
|
6.5 (v3.1)
|
Kubernetes kubectl cp path traversal on Windows allows…
|
Kubernetes
|
Kubernetes
|
2026-09-28T11:38:10.699Z |
2026-09-28T18:09:01.767Z |
|
cve-2026-87752
|
6.1 (v3.1)
|
HTML Injection in Rolantis Information Technologies' Agentis
|
Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.
|
Agentis
|
2026-09-28T11:34:37.356Z |
2026-09-28T13:31:28.906Z |
|
cve-2026-101053
|
|
Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FI…
|
Thinkware
|
U3000
|
2026-09-28T11:30:15.930Z |
2026-09-28T12:46:30.387Z |
|
cve-2026-94194
|
6.3 (v4.0)
|
Mint HTTP/1 client applies chunked framing when chunke…
|
elixir-mint
|
mint
|
2026-09-28T11:15:30.684Z |
2026-09-30T13:17:02.563Z |
|
cve-2026-92103
|
6.3 (v4.0)
|
Mint HTTP/2 client buffers oversized frames up to 16 M…
|
elixir-mint
|
mint
|
2026-09-28T11:15:20.657Z |
2026-09-30T15:00:38.567Z |
|
cve-2026-91043
|
8.2 (v4.0)
|
HPACK-indexed cookie fields in Mint HTTP/2 responses b…
|
elixir-mint
|
mint
|
2026-09-28T11:15:09.158Z |
2026-09-29T10:15:15.619Z |
|
cve-2026-101052
|
|
refly-ai refly JWT Token app.config.ts hard-coded cred…
|
refly-ai
|
refly
|
2026-09-28T11:15:06.560Z |
2026-09-28T12:20:23.582Z |
|
cve-2026-101040
|
|
Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP …
|
Ricoh
|
SP 330DN
|
2026-09-28T11:00:13.020Z |
2026-10-01T14:13:40.410Z |