Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile… aircheng-org
iWebShop-5
2026-10-19T00:30:56.113Z 2026-10-19T16:31:06.932Z
cve-2026-112055 6.8 (v4.0) 5.5 (v3.1) wvWare wv through 1.2.9 Stack Out-of-Bounds Read via w… wvWare
wv
2026-10-18T12:19:46.319Z 2026-10-19T16:29:54.331Z
cve-2026-112031 Chamilo LMS Ticket TicketManager.php addProject cross … Chamilo
LMS
2026-10-18T23:30:21.096Z 2026-10-19T16:26:25.422Z
cve-2026-112111 5.1 (v4.0) The Bootstrap Shortcodes plugin for WordPress bef… Bootstrap Shortcodes project
Bootstrap Shortcodes
2026-10-18T22:39:46.933Z 2026-10-19T16:20:39.966Z
cve-2026-112027 light0011 cms Uploadify check-exists.php file_exists f… light0011
cms
2026-10-18T22:30:17.291Z 2026-10-19T16:18:53.095Z
cve-2026-111992 itsmeravitejak Online-Examination-System Exam exam.php… itsmeravitejak
Online-Examination-System
2026-10-18T16:45:13.905Z 2026-10-19T16:15:30.652Z
cve-2026-111987 AUTOMATIC1111 stable-diffusion-webui Extra-Networks Ca… AUTOMATIC1111
stable-diffusion-webui
2026-10-18T13:15:16.251Z 2026-10-19T16:14:37.028Z
cve-2026-112050 2.3 (v4.0) 3.1 (v3.1) Gitify before 7.10.0 Login CSRF via Missing OAuth Stat… gitify-app
gitify
2026-10-18T12:19:42.143Z 2026-10-19T16:09:30.685Z
cve-2026-112021 8.7 (v4.0) 7.5 (v3.1) snac2 before 2.93 Heap-Based Buffer Overflow via JSON … grunfink
snac2
2026-10-18T11:38:40.652Z 2026-10-19T16:05:15.544Z
cve-2026-112016 6.9 (v4.0) 6.5 (v3.1) Netcore NR256CN through 1.5.140116 Unauthenticated Wri… Netcore
NR256CN
2026-10-18T11:38:37.119Z 2026-10-19T16:03:11.589Z
cve-2026-112011 5.8 (v4.0) 5.3 (v3.1) libtta through 2.3 Integer Overflow via tta_decoder_in… True Audio
libtta
2026-10-18T11:38:33.369Z 2026-10-19T16:01:06.785Z
cve-2026-112006 8.3 (v4.0) 6.5 (v3.1) OpenTelemetry opentelemetry-exporter-otlp-proto-http 1… OpenTelemetry
opentelemetry-exporter-otlp-proto-http
2026-10-18T11:38:29.855Z 2026-10-19T15:59:16.298Z
cve-2026-112001 8.6 (v4.0) 7.2 (v3.1) ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization… ProjectSend
ProjectSend
2026-10-18T11:38:26.451Z 2026-10-19T15:55:45.461Z
cve-2026-110886 9.8 (v3.1) WordPress Conversational Forms for ChatBot plugin <= 1… QuantumCloud
Conversational Forms for ChatBot
2026-10-18T11:00:30.021Z 2026-10-19T15:53:23.555Z
cve-2026-109894 9.3 (v3.1) WordPress Booktics plugin <= 1.0.29 - SQL Injection vu… Arraytics
Booktics
2026-10-18T11:00:29.562Z 2026-10-19T15:51:39.092Z
cve-2026-110897 7.1 (v3.1) WordPress PowerPack Lite for Beaver Builder plugin <= … IdeaBox Creations
PowerPack Lite for Beaver Builder
2026-10-18T11:00:28.706Z 2026-10-19T15:48:00.679Z
cve-2026-110382 7.1 (v3.1) WordPress Simply Schedule Appointments plugin <= 1.6.1… NSquared
Simply Schedule Appointments
2026-10-18T11:00:28.191Z 2026-10-19T15:45:31.217Z
cve-2026-108485 7.1 (v3.1) WordPress eStore theme <= 1.6.13 - Cross Site Scriptin… ThemeGrill
eStore
2026-10-18T11:00:28.148Z 2026-10-19T15:42:56.281Z
cve-2026-111942 hrisikeshpal Blood_Bank_Management_System abs.php cros… hrisikeshpal
Blood_Bank_Management_System
2026-10-18T06:15:07.764Z 2026-10-19T15:38:22.610Z
cve-2026-111874 OpenCATS Career Portal CareersUI.php processLogin exce… n/a
OpenCATS
2026-10-18T05:15:11.452Z 2026-10-19T15:31:33.050Z
cve-2026-46471 N/A An issue was discovered in GStreamer gst-plugins-… n/a
n/a
2026-10-16T00:00:00.000Z 2026-10-19T15:30:39.782Z
cve-2026-111793 4.3 (v3.1) Openwave Webtop Media Transcoder does not enforce… Openwave Messaging (Ireland) Limited
Webtop Media Transcoder
2026-10-16T18:28:10.170Z 2026-10-19T15:27:38.728Z
cve-2026-111870 itsmeravitejak Online-Examination-System admin.php isA… itsmeravitejak
Online-Examination-System
2026-10-18T03:30:21.418Z 2026-10-19T15:24:11.923Z
cve-2026-77228 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-19T15:18:11.843Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} N/A N/A 2026-10-19T15:18:11.843Z
cve-2026-77227 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-19T15:18:08.597Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} N/A N/A 2026-10-19T15:18:08.597Z
cve-2026-77225 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-19T15:18:04.916Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} N/A N/A 2026-10-19T15:18:04.916Z
cve-2026-111933 6.3 (v4.0) 3.7 (v3.1) Coder before 2.34.2 User Enumeration via Login Placeho… coder
coder
2026-10-17T18:46:43.456Z 2026-10-19T15:12:57.230Z
cve-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py… THU-MIG
yoloe
2026-10-17T20:45:12.470Z 2026-10-19T15:04:22.292Z
cve-2026-111928 5.3 (v4.0) 5.4 (v3.1) Coder 2.0.0 before 2.34.8 Authorization Bypass via Use… coder
coder
2026-10-17T18:46:40.029Z 2026-10-19T15:03:05.568Z
cve-2026-111922 7.2 (v4.0) 6.3 (v3.1) Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trus… go-vikunja
vikunja
2026-10-17T18:46:35.991Z 2026-10-19T15:00:44.366Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description