|
cve-2026-100529
|
7.4 (v4.0)
6.4 (v3.1)
|
OpenClaw before 2026.8.1 Authorization Scope Widening …
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:31.110Z |
2026-09-29T17:16:55.777Z |
|
cve-2026-100528
|
5.9 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 Credential Disclosure via Pro…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:30.427Z |
2026-09-30T00:17:10.136Z |
|
cve-2026-100527
|
6.9 (v4.0)
5.3 (v3.1)
|
OpenClaw before 2026.8.2 Denial of Service via Browser Relay
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:29.745Z |
2026-10-05T14:55:04.758Z |
|
cve-2026-100526
|
6 (v4.0)
5.3 (v3.1)
|
Vulnerability in discord
|
openclaw
|
discord
|
2026-09-26T02:18:29.070Z |
2026-10-08T15:21:43.407Z |
|
cve-2026-100525
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenClaw diagnostics-prometheus before 2026.9.3 Authen…
|
openclaw
|
diagnostics-prometheus
|
2026-09-26T02:18:28.402Z |
2026-10-08T15:21:42.617Z |
|
cve-2026-100524
|
5.3 (v4.0)
5.4 (v3.1)
|
Cotonti through 1.0.0 Cross-Site Request Forgery via E…
|
Cotonti
|
Cotonti
|
2026-09-26T00:59:24.986Z |
2026-09-30T00:16:30.714Z |
|
cve-2026-100523
|
5.1 (v4.0)
6.1 (v3.1)
|
Cotonti through 1.0.0 Open Redirect via message.php re…
|
Cotonti
|
Cotonti
|
2026-09-26T00:59:24.331Z |
2026-10-05T14:55:04.892Z |
|
cve-2026-100522
|
5.1 (v4.0)
6.1 (v3.1)
|
Cotonti through 1.0.0 Reflected XSS via message.php ln…
|
Cotonti
|
Cotonti
|
2026-09-26T00:59:23.634Z |
2026-09-28T17:41:33.542Z |
|
cve-2026-100521
|
5.1 (v4.0)
6.1 (v3.1)
|
Cotonti through 1.0.0 Reflected XSS via search highlig…
|
Cotonti
|
Cotonti
|
2026-09-26T00:59:22.982Z |
2026-09-29T17:22:25.279Z |
|
cve-2026-100520
|
8.7 (v4.0)
8.8 (v3.1)
|
Laranode before 1.2.1 Path Traversal in File Manager U…
|
crivion
|
Laranode
|
2026-09-26T00:59:22.329Z |
2026-09-30T00:15:32.907Z |
|
cve-2026-100505
|
4.8 (v4.0)
4.4 (v3.1)
|
Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via …
|
NationalSecurityAgency
|
ghidra
|
2026-09-26T00:36:33.247Z |
2026-10-05T14:55:05.029Z |
|
cve-2026-100504
|
7.3 (v4.0)
7 (v3.1)
|
Ghidra through 12.1.4 Stack-based Buffer Overflow via …
|
NationalSecurityAgency
|
ghidra
|
2026-09-26T00:36:32.604Z |
2026-10-22T09:48:43.541Z |
|
cve-2026-100503
|
4.8 (v4.0)
3.3 (v3.1)
|
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler
|
NationalSecurityAgency
|
ghidra
|
2026-09-26T00:36:31.894Z |
2026-10-22T09:48:42.871Z |
|
cve-2026-86066
|
|
Horilla attendance approval endpoint is vulnerable to …
|
horilla
|
horilla-hr
|
2026-09-25T22:18:13.406Z |
2026-09-30T00:14:31.548Z |
|
cve-2026-96795
|
|
Horilla: Authenticated RCE in Horilla List-View Export
|
horilla
|
horilla-hr
|
2026-09-25T22:17:04.855Z |
2026-09-28T13:48:15.085Z |
|
cve-2026-57449
|
|
Actual Sync Server: CORS Proxy GitHub API Allowlist Pr…
|
actualbudget
|
actual
|
2026-09-25T22:10:39.706Z |
2026-09-28T13:07:46.380Z |
|
cve-2026-100502
|
5.9 (v4.0)
5 (v3.1)
|
Flame through 2.4.0 Admin Token Insufficient Session E…
|
pawelmalak
|
flame
|
2026-09-25T22:04:02.084Z |
2026-09-30T00:13:26.591Z |
|
cve-2026-100501
|
8.3 (v4.0)
6.5 (v3.1)
|
Flame through 2.4.0 Brute-Force Attack via Login Endpoint
|
pawelmalak
|
flame
|
2026-09-25T22:04:01.425Z |
2026-10-05T14:55:05.164Z |
|
cve-2026-100419
|
7.3 (v4.0)
7 (v3.1)
|
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
|
GitoxideLabs
|
gitoxide
|
2026-09-25T22:04:00.750Z |
2026-09-28T13:06:21.364Z |
|
cve-2026-100418
|
6.9 (v4.0)
5.3 (v3.1)
|
Flame through 2.4.0 Information Exposure via GET /api/config
|
pawelmalak
|
flame
|
2026-09-25T22:04:00.085Z |
2026-09-29T17:39:22.712Z |
|
cve-2026-71483
|
|
Horilla: Reflected Cross-Site Scripting (XSS) in Emplo…
|
horilla
|
horilla-hr
|
2026-09-25T21:59:50.220Z |
2026-09-29T17:42:24.531Z |
|
cve-2026-63432
|
|
Horilla: Server-Side Template Injection (SSTI) in Mail…
|
horilla
|
horilla-hr
|
2026-09-25T21:58:21.585Z |
2026-09-28T14:32:45.939Z |
|
cve-2026-63431
|
|
Horilla: Missing Authorization on Payroll Component Vi…
|
horilla
|
horilla-hr
|
2026-09-25T21:56:00.074Z |
2026-09-30T00:11:12.578Z |
|
cve-2026-88003
|
|
InvoicePlane: Failure to Revoke Administrative Privile…
|
InvoicePlane
|
InvoicePlane
|
2026-09-25T21:20:13.236Z |
2026-09-28T13:04:37.691Z |
|
cve-2026-92842
|
5.9 (v3.1)
|
OOB read / info leak in convert.* stream filters when …
|
PHP Group
|
PHP
|
2026-09-25T21:11:57.236Z |
2026-09-28T13:31:31.256Z |
|
cve-2026-91768
|
6.5 (v3.1)
|
IPv6 ACL bypass in FastCGI listen.allowed_clients due …
|
PHP Group
|
PHP
|
2026-09-25T21:07:30.950Z |
2026-09-28T13:31:31.382Z |
|
cve-2026-100383
|
4.8 (v4.0)
|
Stored i18n XSS in WikiLambda's VisualEditor integration
|
Wikimedia Foundation
|
Mediawiki - WikiLambda Extension
|
2026-09-25T21:05:51.966Z |
2026-09-26T22:51:17.609Z |
|
cve-2026-100382
|
10 (v4.0)
|
Unauthenticated remote code execution through wikitext…
|
Wikimedia Foundation
|
Mediawiki - ExternalData Extension
|
2026-09-25T21:04:02.848Z |
2026-09-26T22:51:17.735Z |
|
cve-2026-100381
|
5.3 (v4.0)
|
UploadWizard Flickr collection and set titles allow DOM XSS
|
Wikimedia Foundation
|
Mediawiki - UploadWizard Extension
|
2026-09-25T21:00:42.736Z |
2026-09-26T22:51:17.860Z |
|
cve-2026-91769
|
4.3 (v3.1)
|
TLS Hostname Verification Falls Back to CN After SAN M…
|
PHP Group
|
PHP
|
2026-09-25T20:59:39.727Z |
2026-10-04T16:10:05.639Z |