|
cve-2026-111670
|
5.3 (v4.0)
4.3 (v3.1)
|
ClickVisual through 1.1.2 Missing Authorization in api…
|
clickvisual
|
clickvisual
|
2026-10-16T17:39:31.782Z |
2026-10-19T13:25:08.275Z |
|
cve-2026-111665
|
5.3 (v4.0)
5.4 (v3.1)
|
Piranha CMS through 12.2 Missing Authorization in Mana…
|
PiranhaCMS
|
Piranha CMS
|
2026-10-16T17:39:28.253Z |
2026-10-19T13:23:30.162Z |
|
cve-2026-111660
|
6.9 (v4.0)
6.5 (v3.1)
|
waynboot-mall through 2.0.0 Missing Authentication via…
|
wayn111
|
waynboot-mall
|
2026-10-16T17:39:24.825Z |
2026-10-19T13:22:09.770Z |
|
cve-2026-111655
|
5.1 (v4.0)
3.8 (v3.1)
|
ThinkAdmin think-plugs-admin through 1.0.81 IDOR via a…
|
zoujingli
|
think-plugs-admin
|
2026-10-16T17:39:21.412Z |
2026-10-19T13:20:25.246Z |
|
cve-2026-111650
|
8.8 (v4.0)
8.6 (v3.1)
|
ChronoFrame through 1.0.0 Missing Authentication via S…
|
HoshinoSuzumi
|
chronoframe
|
2026-10-16T17:39:17.995Z |
2026-10-19T13:19:39.585Z |
|
cve-2026-111645
|
5.3 (v4.0)
5.4 (v3.1)
|
MrDoc through 1.1.1 Missing Authorization via api/impo…
|
zmister2016
|
MrDoc
|
2026-10-16T17:39:14.432Z |
2026-10-19T13:13:46.523Z |
|
cve-2026-111640
|
5.3 (v4.0)
5.4 (v3.1)
|
DooTask through 1.9.66 Missing Authorization in OKR Co…
|
kuaifan
|
dootask
|
2026-10-16T17:39:10.978Z |
2026-10-19T13:10:53.878Z |
|
cve-2026-111635
|
5.3 (v4.0)
4.3 (v3.1)
|
Helical Insight through 7.0.0 Path Traversal via /getE…
|
helicalinsight
|
helicalinsight
|
2026-10-16T17:39:07.571Z |
2026-10-19T13:09:49.000Z |
|
cve-2026-111630
|
5.3 (v4.0)
5.4 (v3.1)
|
abp-next-admin 10.2.0 through 10.6.0 IDOR in AIManagem…
|
colinin
|
abp-next-admin
|
2026-10-16T17:39:04.184Z |
2026-10-19T13:09:02.973Z |
|
cve-2026-111625
|
5.3 (v4.0)
5 (v3.1)
|
10up Distributor before 2.3.2 Missing Authorization vi…
|
10up
|
Distributor
|
2026-10-16T17:39:00.780Z |
2026-10-19T13:05:49.838Z |
|
cve-2026-111620
|
6 (v4.0)
5.3 (v3.1)
|
O2OA through 10.0.2-ce Cross-Work Attachment Read via …
|
O2OA
|
O2OA
|
2026-10-16T17:38:57.366Z |
2026-10-19T13:02:47.413Z |
|
cve-2026-111615
|
7.1 (v4.0)
6.5 (v3.1)
|
Mall4cloud through 4.0 IDOR Exposing Buyer Addresses v…
|
gz-yami
|
mall4cloud
|
2026-10-16T17:38:53.890Z |
2026-10-19T13:01:07.851Z |
|
cve-2026-105445
|
9.4 (v4.0)
|
Docker Hub account conversion could reassign an active…
|
Docker
|
Docker Hub
|
2026-10-13T17:35:20.071Z |
2026-10-19T13:00:13.891Z |
|
cve-2026-111610
|
5.3 (v4.0)
5.4 (v3.1)
|
B3log Solo through 4.4.0 Missing Authorization in Arti…
|
b3log
|
Solo
|
2026-10-16T17:38:50.451Z |
2026-10-19T12:58:25.595Z |
|
cve-2026-111605
|
8.6 (v4.0)
8.1 (v3.1)
|
Jpom through 2.11.12 Cross-Workspace Authorization Byp…
|
dromara
|
Jpom
|
2026-10-16T17:38:46.940Z |
2026-10-19T12:56:50.501Z |
|
cve-2026-102552
|
5.9 (v3.1)
8.2 (v4.0)
|
Improper verification of the source of a communication…
|
FreeRTOS
|
FreeRTOS-Plus-TCP
|
2026-10-16T17:28:47.578Z |
2026-10-19T12:54:33.789Z |
|
cve-2026-102551
|
7.7 (v3.1)
9.2 (v4.0)
|
Improper verification of the source of a communication…
|
FreeRTOS
|
FreeRTOS-Plus-TCP
|
2026-10-16T17:27:38.483Z |
2026-10-19T12:51:13.488Z |
|
cve-2026-110379
|
7.1 (v3.1)
|
WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site S…
|
Ays Pro
|
Quiz Maker
|
2026-10-19T09:09:18.538Z |
2026-10-19T12:49:30.765Z |
|
cve-2026-111407
|
6.5 (v3.1)
|
WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scrip…
|
Themeum
|
Tutor LMS
|
2026-10-19T09:09:19.001Z |
2026-10-19T12:49:03.673Z |
|
cve-2026-59967
|
|
Tandoor Recipes: Cross-user IDOR in /api/recipe-from-s…
|
TandoorRecipes
|
recipes
|
2026-10-16T16:51:54.639Z |
2026-10-19T12:47:26.855Z |
|
cve-2026-112103
|
|
f3-factory fatfree-core HTTP Client web.php _curl cert…
|
f3-factory
|
fatfree-core
|
2026-10-19T10:00:23.901Z |
2026-10-19T12:46:14.439Z |
|
cve-2026-112107
|
|
ztxz16 fastllm Safetensors Weight Loading model.cpp Cr…
|
ztxz16
|
fastllm
|
2026-10-19T11:00:18.558Z |
2026-10-19T12:44:53.682Z |
|
cve-2026-112140
|
|
llSourcell Doctor-Dignity chat_module.py _get_lib_modu…
|
llSourcell
|
Doctor-Dignity
|
2026-10-19T12:00:23.977Z |
2026-10-19T12:43:12.565Z |
|
cve-2026-86047
|
|
MariaDB: Insufficient quoting in mariadb-dump and SHOW…
|
MariaDB
|
server
|
2026-10-16T16:37:04.254Z |
2026-10-19T12:42:14.961Z |
|
cve-2026-85745
|
|
MariaDB: Out-of-bound buffer read on in `ST_Area` of a…
|
MariaDB
|
server
|
2026-10-16T16:30:30.866Z |
2026-10-19T12:39:16.848Z |
|
cve-2026-77474
|
|
dcg: Exponential-time command-substitution preprocessi…
|
Dicklesworthstone
|
destructive_command_guard
|
2026-10-16T16:10:57.120Z |
2026-10-19T12:38:04.696Z |
|
cve-2026-41582
|
|
countly-server: Unauthenticated Path Traversal via Pub…
|
Countly
|
countly-server
|
2026-10-16T16:03:39.860Z |
2026-10-19T12:37:13.079Z |
|
cve-2026-68906
|
|
libIEC61850: Infinite loop and out-of-bounds read in A…
|
mz-automation
|
libiec61850
|
2026-10-16T15:49:32.595Z |
2026-10-19T12:33:42.207Z |
|
cve-2026-109766
|
N/A
|
Mitigation bypass in the Enterprise Policies component
|
Mozilla
|
Firefox
|
2026-10-13T12:29:32.635Z |
2026-10-19T12:32:55.053Z |
|
cve-2026-109760
|
N/A
|
Mitigation bypass in the Networking: HTTP component
|
Mozilla
|
Firefox
|
2026-10-13T12:29:31.216Z |
2026-10-19T12:30:54.595Z |