|
cve-2026-13016
|
9.3 (v4.0)
|
Unauthenticated SQL Injection in ServiceNow AI Platform
|
ServiceNow
|
ServiceNow AI Platform
|
2026-09-24T18:48:50.070Z |
2026-09-25T12:30:40.103Z |
|
cve-2026-97322
|
|
YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileCon…
|
YunaiV
|
ruoyi-vue-pro
|
2026-09-24T18:45:06.365Z |
2026-09-29T03:09:47.907Z |
|
cve-2026-81455
|
8.6 (v3.1)
|
Dell ThinOS 10, versions prior to SecurityAddon_2…
|
Dell
|
ThinOS 10
|
2026-09-24T18:43:51.003Z |
2026-09-24T18:54:50.476Z |
|
cve-2026-57440
|
|
Mediawiki EmbedVideo Extension has stored XSS via malf…
|
StarCitizenWiki
|
mediawiki-extensions-EmbedVideo
|
2026-09-24T18:42:45.326Z |
2026-09-29T03:09:13.332Z |
|
cve-2026-86858
|
8.7 (v4.0)
|
Unauthenticated Privilege Escalation via GraphQL in Se…
|
ServiceNow
|
ServiceNow AI Platform
|
2026-09-24T18:42:40.766Z |
2026-09-24T19:18:52.579Z |
|
cve-2026-82157
|
8.3 (v3.1)
|
Dell ThinOS 10, versions prior to SecurityAddon_2…
|
Dell
|
ThinOS 10
|
2026-09-24T18:39:21.781Z |
2026-09-25T03:55:29.793Z |
|
cve-2026-86857
|
8.4 (v4.0)
|
Authorization Bypass in ServiceNow AI Platform
|
ServiceNow
|
ServiceNow AI Platform
|
2026-09-24T18:37:47.129Z |
2026-09-25T12:30:11.668Z |
|
cve-2026-48073
|
|
Docmost: Page export can include restricted same-space…
|
docmost
|
docmost
|
2026-09-24T18:33:20.729Z |
2026-09-24T19:23:23.428Z |
|
cve-2026-52853
|
|
Docmost: Privilege Escalation - ADMIN Can Invite Users…
|
docmost
|
docmost
|
2026-09-24T18:31:54.486Z |
2026-10-05T15:32:22.095Z |
|
cve-2026-61823
|
|
code16 Sharp vulnerable to stored XSS via iframe srcdo…
|
code16
|
sharp
|
2026-09-24T18:31:18.190Z |
2026-09-28T14:27:48.299Z |
|
cve-2026-48072
|
|
Docmost: Public image fileName path traversal leads to…
|
docmost
|
docmost
|
2026-09-24T18:30:57.781Z |
2026-09-24T18:48:38.026Z |
|
cve-2026-97321
|
|
YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoin…
|
YunaiV
|
ruoyi-vue-pro
|
2026-09-24T18:30:10.818Z |
2026-09-24T18:51:29.736Z |
|
cve-2026-52850
|
|
Docmost: Broken access control in transclusion lookup …
|
docmost
|
docmost
|
2026-09-24T18:30:06.702Z |
2026-09-29T03:08:21.988Z |
|
cve-2026-65827
|
|
Docmost: Unbounded ZIP decompression (zip-bomb) in pag…
|
docmost
|
docmost
|
2026-09-24T18:28:36.809Z |
2026-09-24T19:22:12.940Z |
|
cve-2026-13248
|
8.8 (v3.1)
|
Authenticated Remote Code Execution via Arbitrary File…
|
Honeywell
|
PD45 Industrial Printer
|
2026-09-24T18:27:33.569Z |
2026-09-24T19:19:53.714Z |
|
cve-2026-61825
|
|
code16/sharp has a stored XSS via data-html-content Sa…
|
code16
|
sharp
|
2026-09-24T18:27:32.284Z |
2026-09-24T18:53:39.208Z |
|
cve-2026-13249
|
9.8 (v3.1)
|
Unauthenticated RCE Arbitrary File Upload Honeywell PD…
|
Honeywell
|
PD45 Industrial Printer
|
2026-09-24T18:24:36.005Z |
2026-09-24T18:38:06.812Z |
|
cve-2026-82371
|
8.5 (v4.0)
|
Plaintext exposure of sensitive authentication data in…
|
Brocade
|
SANnav
|
2026-09-24T18:20:10.791Z |
2026-10-01T20:18:18.322Z |
|
cve-2026-96749
|
7.5 (v4.0)
8.4 (v3.1)
|
Heap out-of-bounds write via signed size overflow in B…
|
MongoDB
|
Python Driver
|
2026-09-24T18:18:13.077Z |
2026-09-26T03:55:41.712Z |
|
cve-2026-96748
|
8.3 (v4.0)
6.5 (v3.1)
|
Connection redirection via percent-encoded delimiter i…
|
MongoDB
|
Python Driver
|
2026-09-24T18:18:12.032Z |
2026-09-24T19:12:05.362Z |
|
cve-2026-96747
|
5.3 (v4.0)
5 (v3.1)
|
Forced local Unix socket connection via dot-sock KMS e…
|
MongoDB
|
Python Driver
|
2026-09-24T18:18:10.962Z |
2026-09-24T19:12:04.304Z |
|
cve-2026-48070
|
|
Docmost: Avatar URL path traversal in avatar cleanup l…
|
docmost
|
docmost
|
2026-09-24T18:15:58.700Z |
2026-10-05T15:32:29.262Z |
|
cve-2026-97320
|
|
YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnow…
|
YunaiV
|
ruoyi-vue-pro
|
2026-09-24T18:15:08.463Z |
2026-10-29T06:31:30.524Z |
|
cve-2026-62286
|
|
Dozzle label filters do not restrict container event a…
|
amir20
|
dozzle
|
2026-09-24T18:11:18.970Z |
2026-09-28T14:53:16.185Z |
|
cve-2026-85738
|
|
TREK: SSRF Guard Bypass via IPv6 Transition Addresses …
|
liketrek
|
TREK
|
2026-09-24T18:09:31.268Z |
2026-09-28T14:51:56.222Z |
|
cve-2026-77293
|
|
TREK: Cross-user note-file deletion (IDOR / Broken Acc…
|
mauriceboe
|
TREK
|
2026-09-24T18:08:30.599Z |
2026-09-24T18:45:45.240Z |
|
cve-2026-77320
|
|
TREK: Public trip share link ignores the `share_map` p…
|
mauriceboe
|
TREK
|
2026-09-24T18:05:13.791Z |
2026-09-29T03:05:34.796Z |
|
cve-2026-77321
|
|
TREK MCP trip summary bypasses delegated OAuth read scopes
|
mauriceboe
|
TREK
|
2026-09-24T18:04:05.947Z |
2026-10-05T15:32:36.028Z |
|
cve-2026-77294
|
|
TREK: Server-Side Request Forgery via User-Configurabl…
|
mauriceboe
|
TREK
|
2026-09-24T18:04:02.393Z |
2026-09-24T18:35:42.537Z |
|
cve-2026-93405
|
|
Mailspring: Stored XSS in attachment quick preview (un…
|
Foundry376
|
Mailspring
|
2026-09-24T18:00:32.245Z |
2026-09-29T03:02:53.880Z |