|
cve-2026-111917
|
7.1 (v4.0)
6.5 (v3.1)
|
Vikunja 2.3.0 before 2.7.0 WebSocket Authentication Ig…
|
go-vikunja
|
vikunja
|
2026-10-17T18:46:32.545Z |
2026-10-19T14:59:06.808Z |
|
cve-2026-112222
|
5.4 (v3.1)
|
WordPress Surfer plugin <= 1.8.0.744 - Broken Access C…
|
Surfer
|
Surfer
|
2026-10-19T13:28:19.208Z |
2026-10-19T14:59:04.484Z |
|
cve-2026-107674
|
5.1 (v3.1)
|
IBM i is Affected by a Denial of Service in Digital Ce…
|
IBM
|
i
|
2026-10-16T18:00:59.693Z |
2026-10-19T14:55:31.510Z |
|
cve-2026-111911
|
9.3 (v4.0)
9.8 (v3.1)
|
phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via …
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:28.833Z |
2026-10-19T14:54:32.100Z |
|
cve-2026-17488
|
4.3 (v3.1)
|
IBM i is Affected By An Improper Authentication Vulner…
|
IBM
|
i
|
2026-10-16T18:38:13.974Z |
2026-10-19T14:53:56.464Z |
|
cve-2026-111906
|
7.1 (v4.0)
6.5 (v3.1)
|
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-bet…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:25.460Z |
2026-10-19T14:52:20.126Z |
|
cve-2026-111901
|
8.7 (v4.0)
7.5 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:22.075Z |
2026-10-19T14:50:09.039Z |
|
cve-2026-111895
|
7.6 (v4.0)
6.8 (v3.1)
|
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-bet…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:18.581Z |
2026-10-19T14:46:24.561Z |
|
cve-2026-111890
|
7 (v4.0)
5.5 (v3.1)
|
phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Esc…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:14.542Z |
2026-10-19T14:43:14.146Z |
|
cve-2025-71435
|
2.3 (v4.0)
4.2 (v3.1)
|
Coder before 2.23.0 Session Expiration Bypass via OIDC…
|
coder
|
coder
|
2026-10-17T18:46:07.735Z |
2026-10-19T14:40:10.199Z |
|
cve-2026-85315
|
5.3 (v3.1)
|
Apache Camel: Camel-gRPC Information Disclosure via Un…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:42:10.032Z |
2026-10-19T14:38:44.708Z |
|
cve-2026-111823
|
9.8 (v3.1)
|
Mage OSS through 0.9.80 before 76c4f46 can procee…
|
Mage
|
mage-ai
|
2026-10-16T23:16:29.244Z |
2026-10-19T14:37:19.362Z |
|
cve-2026-85301
|
4.8 (v3.1)
|
Apache Camel: Camel-Keycloak Issuer Validation Bypass …
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:39:46.650Z |
2026-10-19T14:35:58.104Z |
|
cve-2026-85300
|
5.5 (v3.1)
|
Apache Camel: Camel-PQC Private Key Disclosure via Key…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:40:04.752Z |
2026-10-19T14:35:02.757Z |
|
cve-2026-85312
|
4.8 (v3.1)
|
Apache Camel: Camel-Core Saga Participation Hijacking …
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:40:26.439Z |
2026-10-19T14:34:13.505Z |
|
cve-2026-96627
|
|
Arcane: Delegated users:update permission allows admin…
|
getarcaneapp
|
arcane
|
2026-10-16T21:13:16.717Z |
2026-10-19T14:34:05.584Z |
|
cve-2026-85313
|
4.3 (v3.1)
|
Apache Camel: Camel-Jetty Cross-Origin Credential Expo…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:40:58.206Z |
2026-10-19T14:33:28.013Z |
|
cve-2026-85314
|
6.5 (v3.1)
|
Apache Camel: Camel-Mail Header Injection via Unfilter…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:41:45.323Z |
2026-10-19T14:32:46.401Z |
|
cve-2026-85316
|
4.8 (v3.1)
|
Apache Camel: Camel-Platform-HTTP Unintended Proxy Mod…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:43:00.504Z |
2026-10-19T14:32:09.821Z |
|
cve-2026-85317
|
4.8 (v3.1)
|
Apache Camel: Camel-HTTP OAuth2 Token Confusion via an…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:43:39.184Z |
2026-10-19T14:31:27.611Z |
|
cve-2026-96542
|
5 (v3.1)
|
EA Javelin Anticheat Installer Local Privilege Escalation
|
Electronic Arts
|
EA Javelin Anticheat (EA Javelin Anticheat Installer)
|
2026-10-16T21:00:54.224Z |
2026-10-19T14:31:10.432Z |
|
cve-2026-88901
|
8.2 (v3.1)
|
Apache Camel: Camel-Smooks XML External Entity Process…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:44:07.084Z |
2026-10-19T14:30:52.101Z |
|
cve-2026-91858
|
6.5 (v3.1)
|
Apache Camel: Camel-FOP Resolves External DTDs and Ent…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:47:48.267Z |
2026-10-19T14:30:10.376Z |
|
cve-2026-108374
|
|
ERPNext: Unauthorised status modification due to missi…
|
frappe
|
erpnext
|
2026-10-16T20:38:32.806Z |
2026-10-19T14:29:00.708Z |
|
cve-2026-111410
|
6.5 (v3.1)
|
WordPress e2pdf plugin <= 1.32.57 - Cross Site Scripti…
|
E2Pdf.com
|
e2pdf
|
2026-10-19T12:16:12.230Z |
2026-10-19T14:28:31.696Z |
|
cve-2026-111831
|
5.3 (v3.1)
|
WordPress FluentForm plugin <= 6.2.15 - Broken Access …
|
WP ManageNinja LLC
|
FluentForm
|
2026-10-19T12:24:22.785Z |
2026-10-19T14:28:05.700Z |
|
cve-2026-8168
|
7.1 (v4.0)
|
Denial-of-service vulnerability in the SVG parser and …
|
qt
|
qt
|
2026-10-19T13:08:14.544Z |
2026-10-19T14:27:15.747Z |
|
cve-2026-110008
|
4.2 (v3.1)
|
@fastify/oauth2 vulnerable to Login CSRF via OAuth sta…
|
@fastify/oauth2
|
@fastify/oauth2
|
2026-10-19T13:24:27.988Z |
2026-10-19T14:26:45.991Z |
|
cve-2026-102607
|
|
ZoneMinder: Authenticated OS Command Injection (RCE) v…
|
ZoneMinder
|
zoneminder
|
2026-10-16T19:29:58.131Z |
2026-10-19T14:26:23.072Z |
|
cve-2026-110902
|
4.3 (v3.1)
|
WordPress Event Tickets plugin <= 5.30.1 - Insecure Di…
|
Liquid Web / StellarWP
|
Event Tickets
|
2026-10-19T13:27:05.415Z |
2026-10-19T14:26:14.786Z |