|
cve-2026-100878
|
|
zhistaredu StarTraining authRole Endpoint SysUser.java…
|
zhistaredu
|
StarTraining
|
2026-09-27T20:30:05.937Z |
2026-09-28T13:02:07.739Z |
|
cve-2026-96280
|
7.5 (v3.1)
|
Flatpak: flatpak: buffer overflow in oci delta stream …
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-27T20:19:12.890Z |
2026-11-06T02:14:18.213Z |
|
cve-2026-100877
|
|
mathurvishal CloudClassroom-PHP-Project registrationfo…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-27T20:15:09.305Z |
2026-09-28T13:53:13.147Z |
|
cve-2026-96279
|
6.5 (v3.1)
|
Flatpak: flatpak: path traversal issue in oci archive …
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-27T19:49:17.239Z |
2026-11-06T02:14:14.596Z |
|
cve-2026-100876
|
|
mathurvishal CloudClassroom-PHP-Project loginlinkstude…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-27T19:45:08.814Z |
2026-09-30T22:09:00.964Z |
|
cve-2026-100875
|
|
mathurvishal CloudClassroom-PHP-Project updatedetailsf…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-27T19:00:09.111Z |
2026-09-28T13:02:44.005Z |
|
cve-2026-100874
|
|
mathurvishal CloudClassroom-PHP-Project addnewstudent.…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-27T18:30:07.193Z |
2026-09-28T13:58:39.743Z |
|
cve-2026-100873
|
|
mathurvishal CloudClassroom-PHP-Project cross-site req…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-27T18:00:15.506Z |
2026-09-30T22:07:34.849Z |
|
cve-2026-101061
|
2.3 (v4.0)
4.7 (v3.1)
|
utcp-gql and utcp-websocket before 1.1.1 SSRF via URL …
|
universal-tool-calling-protocol
|
python-utcp
|
2026-09-27T17:02:41.556Z |
2026-09-30T14:14:29.298Z |
|
cve-2026-101060
|
8.4 (v4.0)
8.2 (v3.1)
|
python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects
|
universal-tool-calling-protocol
|
python-utcp
|
2026-09-27T17:02:40.832Z |
2026-09-28T13:11:32.149Z |
|
cve-2026-101059
|
7.1 (v4.0)
7.1 (v3.1)
|
utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
|
universal-tool-calling-protocol
|
python-utcp
|
2026-09-27T17:02:40.181Z |
2026-09-28T14:02:40.274Z |
|
cve-2026-101058
|
7.1 (v4.0)
6.9 (v3.1)
|
python-utcp before 1.1.12 SSRF via Remote HTTP Manual
|
universal-tool-calling-protocol
|
python-utcp
|
2026-09-27T17:02:39.400Z |
2026-09-30T22:06:29.482Z |
|
cve-2026-101057
|
2.3 (v4.0)
3.1 (v3.1)
|
utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL
|
universal-tool-calling-protocol
|
python-utcp
|
2026-09-27T17:02:38.721Z |
2026-09-30T15:38:21.693Z |
|
cve-2026-101056
|
6.9 (v4.0)
5.3 (v3.1)
|
Cloudreve before 4.16.1 Authentication Bypass via Cach…
|
cloudreve
|
cloudreve
|
2026-09-27T17:02:38.060Z |
2026-10-08T15:22:09.212Z |
|
cve-2026-101051
|
2.3 (v4.0)
3.1 (v3.1)
|
Cloudreve before 4.16.1 Path Traversal via Remote Download
|
cloudreve
|
cloudreve
|
2026-09-27T17:02:37.358Z |
2026-09-28T14:06:18.432Z |
|
cve-2026-101048
|
5.3 (v4.0)
5.4 (v3.1)
|
Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope
|
cloudreve
|
cloudreve
|
2026-09-27T17:02:36.546Z |
2026-10-08T15:22:07.489Z |
|
cve-2026-101047
|
6.9 (v4.0)
5.3 (v3.1)
|
Fleet before 4.87.0 Unauthenticated iOS App Download v…
|
fleetdm
|
fleet
|
2026-09-27T17:02:35.852Z |
2026-09-30T14:47:15.528Z |
|
cve-2026-101046
|
2.3 (v4.0)
3.1 (v3.1)
|
Fleet before 4.89.0 SQL Injection via ORDER BY Activit…
|
fleetdm
|
fleet
|
2026-09-27T17:02:35.154Z |
2026-09-28T13:16:02.557Z |
|
cve-2026-101045
|
8.9 (v4.0)
8 (v3.1)
|
Fleet Homebrew Cask OS Command Injection via Metadata
|
fleetdm
|
fleet
|
2026-09-27T17:02:34.472Z |
2026-09-30T17:20:13.569Z |
|
cve-2026-101044
|
7.1 (v4.0)
7.1 (v3.1)
|
pacquet before 12.0.0-alpha.5 Path Traversal via lockf…
|
pnpm
|
pnpm
|
2026-09-27T17:02:33.798Z |
2026-09-30T15:29:02.862Z |
|
cve-2026-101043
|
8.3 (v4.0)
7.4 (v3.1)
|
pnpm 11.0.0 before 11.11.0 Environment Variable Exfilt…
|
pnpm
|
pnpm
|
2026-09-27T17:02:33.119Z |
2026-09-30T15:47:12.588Z |
|
cve-2026-88778
|
8.8 (v4.0)
|
TCP Initial Sequence Number (ISN) prediction
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:43:16.503Z |
2026-09-29T16:35:06.769Z |
|
cve-2026-88777
|
8.8 (v4.0)
|
Memory overflow vulnerability leading to unpredictable…
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:37:44.345Z |
2026-09-29T21:01:24.942Z |
|
cve-2026-88776
|
8.8 (v4.0)
|
Memory overflow vulnerability leading to unpredictable…
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:36:40.034Z |
2026-09-29T16:06:45.542Z |
|
cve-2026-101050
|
8.3 (v4.0)
6.5 (v3.1)
|
Heym before 0.0.53 Authentication Bypass via Telegram …
|
heymrun
|
heym
|
2026-09-27T16:28:28.766Z |
2026-09-28T13:14:37.706Z |
|
cve-2026-101049
|
8.3 (v4.0)
6.5 (v3.1)
|
Heym before 0.0.53 Slack Webhook Signature Verificatio…
|
heymrun
|
heym
|
2026-09-27T16:28:28.128Z |
2026-09-28T14:18:44.096Z |
|
cve-2026-101042
|
7.4 (v4.0)
6.4 (v3.1)
|
Parse Server 9.0.0 Authentication Bypass via Unverifie…
|
parse-community
|
parse-server
|
2026-09-27T16:28:27.452Z |
2026-09-30T15:28:02.845Z |
|
cve-2026-88775
|
8.8 (v4.0)
|
Memory overflow vulnerability leading to unpredictable…
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:21:12.160Z |
2026-09-29T15:15:39.206Z |
|
cve-2026-88773
|
9.3 (v4.0)
|
HTTP Request Smuggling
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:20:08.382Z |
2026-09-29T15:21:44.819Z |
|
cve-2026-88774
|
7 (v4.0)
|
Feature policy bypass due to improper HTTP URL based e…
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:14:02.993Z |
2026-09-29T15:24:29.082Z |