|
cve-2026-100893
|
|
Privoce VoceChat Server open_graphic_parse Endpoint re…
|
Privoce
|
VoceChat Server
|
2026-09-28T00:45:15.919Z |
2026-09-28T12:56:10.518Z |
|
cve-2026-100892
|
|
aligungr UERANSIM nr-gnb handler.cpp ULInformationTran…
|
aligungr
|
UERANSIM
|
2026-09-28T00:30:09.114Z |
2026-09-28T13:02:41.006Z |
|
cve-2026-100891
|
|
Trusted Domain Project OpenDMARC Internationalized Dom…
|
Trusted Domain Project
|
OpenDMARC
|
2026-09-28T00:15:14.678Z |
2026-10-01T13:55:15.001Z |
|
cve-2026-100890
|
|
Trusted Domain Project OpenDMARC SPF Parser opendmarc_…
|
Trusted Domain Project
|
OpenDMARC
|
2026-09-28T00:00:12.540Z |
2026-09-28T12:55:20.361Z |
|
cve-2026-100889
|
|
Trusted Domain Project OpenDKIM Decoder util.c dkim_qp…
|
Trusted Domain Project
|
OpenDKIM
|
2026-09-27T23:45:16.286Z |
2026-09-28T13:11:18.272Z |
|
cve-2026-100888
|
|
Trusted Domain Project OpenDKIM DKIM Signature Header …
|
Trusted Domain Project
|
OpenDKIM
|
2026-09-27T23:30:16.015Z |
2026-09-30T22:16:22.497Z |
|
cve-2026-100887
|
|
amirsanni Mini-Inventory-and-Sales-Management-System D…
|
amirsanni
|
Mini-Inventory-and-Sales-Management-System
|
2026-09-27T23:15:14.110Z |
2026-09-28T12:53:53.976Z |
|
cve-2026-100886
|
|
Seetong T8108/T8108P/T8116/T8232 Debug Service imprope…
|
Seetong
|
T8108
|
2026-09-27T23:00:09.011Z |
2026-10-23T14:43:10.196Z |
|
cve-2026-100885
|
|
Krayin laravel-crm admin-config-setup API Endpoint Can…
|
Krayin
|
laravel-crm
|
2026-09-27T22:45:19.897Z |
2026-09-30T22:15:32.020Z |
|
cve-2026-100884
|
|
Krayin laravel-crm attachment-download Endpoint acl.ph…
|
Krayin
|
laravel-crm
|
2026-09-27T22:30:14.286Z |
2026-09-28T12:54:26.833Z |
|
cve-2026-100883
|
|
Krayin laravel-crm acl.php access control
|
Krayin
|
laravel-crm
|
2026-09-27T22:15:08.551Z |
2026-09-28T13:19:18.207Z |
|
cve-2026-96284
|
2.5 (v3.1)
|
Flatpak: flatpak: arbitrary read-access to files in th…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-27T22:04:48.577Z |
2026-11-06T20:01:20.516Z |
|
cve-2026-100882
|
|
Krayin laravel-crm Admin Settings Endpoint index.blade…
|
Krayin
|
laravel-crm
|
2026-09-27T22:00:13.969Z |
2026-09-30T22:14:49.571Z |
|
cve-2026-96282
|
3.1 (v3.1)
|
Flatpak: flatpak: extension metadata path traversal fi…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-27T21:53:43.645Z |
2026-11-06T20:01:17.649Z |
|
cve-2026-96283
|
3.3 (v3.1)
|
Flatpak: flatpak: flatpak-system-helper cross-user can…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-27T21:53:40.259Z |
2026-11-06T20:01:19.230Z |
|
cve-2026-100881
|
|
zhistaredu StarTraining application.yml cross site scripting
|
zhistaredu
|
StarTraining
|
2026-09-27T21:15:12.454Z |
2026-09-28T12:59:08.742Z |
|
cve-2026-96281
|
6.2 (v3.1)
|
Flatpak: flatpak: unprivileged active user can bypass …
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-27T21:00:17.262Z |
2026-11-06T02:14:19.696Z |
|
cve-2026-100880
|
|
zhistaredu StarTraining Upload Endpoint MimeTypeUtils.…
|
zhistaredu
|
StarTraining
|
2026-09-27T21:00:11.400Z |
2026-09-28T13:42:27.674Z |
|
cve-2026-101090
|
9.3 (v4.0)
9.8 (v3.1)
|
Nezha through 2.2.3 Host Header Injection via OAuth2 r…
|
nezhahq
|
nezha
|
2026-09-27T20:50:00.857Z |
2026-09-28T13:00:01.476Z |
|
cve-2026-101089
|
2.3 (v4.0)
3.1 (v3.1)
|
Nezha before 2.2.7 Information Disclosure via /api/v1/…
|
nezhahq
|
nezha
|
2026-09-27T20:50:00.193Z |
2026-09-28T13:46:40.626Z |
|
cve-2026-101088
|
6 (v4.0)
5.3 (v3.1)
|
Nezha before 2.3.1 Denial of Service via Concurrent Se…
|
nezhahq
|
nezha
|
2026-09-27T20:49:59.487Z |
2026-09-30T22:13:47.785Z |
|
cve-2026-101087
|
5.3 (v4.0)
4.3 (v3.1)
|
Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6
|
nezhahq
|
nezha
|
2026-09-27T20:49:58.749Z |
2026-09-30T14:12:28.088Z |
|
cve-2026-101086
|
7.1 (v4.0)
6.5 (v3.1)
|
Nezha Dashboard before 2.3.5 Task Type Validation Bypass
|
nezhahq
|
nezha
|
2026-09-27T20:49:58.066Z |
2026-09-28T13:00:54.158Z |
|
cve-2026-101085
|
7.1 (v4.0)
6.5 (v3.1)
|
Nezha before 2.3.8 Denial of Service via Alert Rule
|
nezhahq
|
nezha
|
2026-09-27T20:49:57.376Z |
2026-09-28T13:47:18.879Z |
|
cve-2026-101084
|
9.3 (v4.0)
9.6 (v3.1)
|
obot before v0.21.1 Authorization Bypass via /mcp-connect
|
obot-platform
|
obot
|
2026-09-27T20:49:56.702Z |
2026-09-30T22:12:50.861Z |
|
cve-2026-101065
|
9.3 (v4.0)
9.8 (v3.1)
|
Obot Quickstart Docker Deployment Unauthenticated Admi…
|
obot-platform
|
obot
|
2026-09-27T20:49:56.009Z |
2026-09-30T17:20:14.254Z |
|
cve-2026-101064
|
8.3 (v4.0)
7.6 (v3.1)
|
Obot before v0.23.0 Server-Side Request Forgery via MCP
|
obot-platform
|
obot
|
2026-09-27T20:49:55.344Z |
2026-09-28T13:01:29.785Z |
|
cve-2026-101063
|
6.9 (v4.0)
5.3 (v3.1)
|
Obot before v0.23.0 Authentication Bypass via Registry API
|
obot-platform
|
obot
|
2026-09-27T20:49:54.677Z |
2026-09-28T13:49:35.081Z |
|
cve-2026-101062
|
8.7 (v4.0)
8.8 (v3.1)
|
Obot before v0.23.0 Authentication Bypass via OAuth Dy…
|
obot-platform
|
obot
|
2026-09-27T20:49:54.008Z |
2026-09-30T22:11:52.618Z |
|
cve-2026-100879
|
|
zhistaredu StarTraining dataScope Endpoint SysRoleServ…
|
zhistaredu
|
StarTraining
|
2026-09-27T20:45:08.786Z |
2026-09-30T22:10:01.362Z |