|
cve-2026-92730
|
7.4 (v4.0)
|
LimeSurvey Community Edition 7.0.14 - Reflected XSS in…
|
LimeSurvey
|
LimeSurvey
|
2026-09-23T18:02:02.601Z |
2026-09-23T19:32:21.944Z |
|
cve-2026-63132
|
|
OpenBao's Recovery Mode Vulnerable To Token Leakage vi…
|
openbao
|
openbao
|
2026-09-23T17:59:19.639Z |
2026-09-23T19:16:11.327Z |
|
cve-2026-63131
|
|
OpenBao LIST ACL bypass: a trailing-slash LIST request…
|
openbao
|
openbao
|
2026-09-23T17:59:16.337Z |
2026-09-24T14:15:04.716Z |
|
cve-2026-77285
|
|
OpenBao Agent Writes Secrets to Stdout
|
openbao
|
openbao
|
2026-09-23T17:59:13.118Z |
2026-09-23T19:23:54.659Z |
|
cve-2026-55632
|
|
GoCD is vulnerable to authorization bypass via pipelin…
|
gocd
|
gocd
|
2026-09-23T17:59:10.151Z |
2026-09-23T19:44:07.198Z |
|
cve-2026-52744
|
|
GoCD is vulnerable to authorization bypass via fetch a…
|
gocd
|
gocd
|
2026-09-23T17:58:52.039Z |
2026-09-29T02:03:59.873Z |
|
cve-2026-92700
|
|
Caddy: fileHidden() case-sensitive pattern bypass — ex…
|
caddyserver
|
caddy
|
2026-09-23T17:58:45.844Z |
2026-09-23T19:23:08.504Z |
|
cve-2026-92284
|
|
Caddy: Unbounded body buffer via {http.request.body} p…
|
caddyserver
|
caddy
|
2026-09-23T17:58:42.789Z |
2026-09-23T19:21:14.152Z |
|
cve-2026-88840
|
5.3 (v3.1)
|
Busybox: busybox: tls ssl_server reads one byte out of…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:45:34.724Z |
2026-09-26T22:51:21.731Z |
|
cve-2026-88839
|
6.7 (v3.1)
|
Busybox: busybox: passwd/group parser writes heap poin…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:45:33.584Z |
2026-09-25T22:28:25.024Z |
|
cve-2026-88837
|
6.5 (v3.1)
|
Busybox: busybox: httpd misidentifies yescrypt passwor…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:45:31.496Z |
2026-09-25T22:28:21.760Z |
|
cve-2026-88835
|
6.1 (v3.1)
|
Busybox: busybox: dpkg read_package_field() steps past…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:45:27.703Z |
2026-09-25T22:28:21.858Z |
|
cve-2026-88831
|
5.3 (v3.1)
|
Busybox: busybox: httpd silently fails open when ip de…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:45:23.299Z |
2026-09-25T22:28:19.246Z |
|
cve-2026-86867
|
N/A
|
Cinnamon's kotaemon contains improper authorization ch…
|
Cinnamon AI
|
Kotaemon
|
2026-09-23T17:44:52.482Z |
2026-09-24T14:37:20.022Z |
|
cve-2026-86934
|
N/A
|
An authorization bypass vulnerability in the File…
|
Claris
|
FileMaker Server
|
2026-09-23T17:20:20.178Z |
2026-09-24T14:40:04.774Z |
|
cve-2026-86938
|
N/A
|
A DLL hijacking vulnerability in the FileMaker Pr…
|
Claris
|
FileMaker Pro
|
2026-09-23T17:20:19.357Z |
2026-09-24T14:43:10.361Z |
|
cve-2026-86926
|
N/A
|
A heap buffer overflow vulnerability in the FileM…
|
Claris
|
FileMaker Server
|
2026-09-23T17:20:18.495Z |
2026-09-24T14:47:59.587Z |
|
cve-2026-86930
|
N/A
|
An out-of-bounds read vulnerability in FileMaker …
|
Claris
|
FileMaker Server
|
2026-09-23T17:20:17.648Z |
2026-09-24T14:50:07.222Z |
|
cve-2026-91775
|
7.4 (v4.0)
|
LimeSurvey Community Edition 7.0.14 - Reflected XSS th…
|
LimeSurvey
|
LimeSurvey
|
2026-09-23T17:13:46.100Z |
2026-10-02T17:15:46.635Z |
|
cve-2026-88832
|
7.3 (v3.1)
|
Busybox: busybox: romfs volume id parsing performs unb…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:05:00.787Z |
2026-09-25T22:12:51.387Z |
|
cve-2026-88830
|
7.5 (v3.1)
|
Busybox: busybox: tls montgomery reduction allocates b…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-23T17:04:57.011Z |
2026-09-24T16:26:07.002Z |
|
cve-2026-96808
|
7.4 (v3.1)
|
In Flatpak before 1.18.1, the revokefs writer, us…
|
Flatpak
|
Flatpak
|
2026-09-23T16:58:37.139Z |
2026-09-23T18:22:46.208Z |
|
cve-2026-96807
|
4 (v3.1)
|
In Flatpak before 1.18.1, a malicious sandboxed a…
|
Flatpak
|
Flatpak
|
2026-09-23T16:54:16.931Z |
2026-09-26T22:51:21.873Z |
|
cve-2026-96514
|
|
Neethuharii CafeManagement Login CafePortalLogin.php s…
|
Neethuharii
|
CafeManagement
|
2026-09-23T16:45:05.439Z |
2026-09-23T19:44:24.141Z |
|
cve-2026-96804
|
N/A
|
CVE-2026-96804
|
MLflow
|
MLflow
|
2026-09-23T16:35:05.250Z |
2026-09-24T03:55:42.990Z |
|
cve-2026-93349
|
8.6 (v4.0)
8.8 (v3.1)
|
Frictionless OS Command Injection via explore Console …
|
frictionlessdata
|
frictionless-py
|
2026-09-23T16:34:57.201Z |
2026-09-28T14:48:00.776Z |
|
cve-2026-96513
|
|
Neethuharii CafeManagement AddProductCode.php unrestri…
|
Neethuharii
|
CafeManagement
|
2026-09-23T16:30:12.474Z |
2026-09-23T17:59:31.156Z |
|
cve-2026-95848
|
|
Moquette fails open when configured authentication or …
|
moquette-io
|
moquette
|
2026-09-23T16:29:58.300Z |
2026-09-23T17:58:59.375Z |
|
cve-2026-95847
|
|
Moquette client IDs can cause cross-session H2 durable…
|
moquette-io
|
moquette
|
2026-09-23T16:29:56.125Z |
2026-09-23T16:50:25.152Z |
|
cve-2026-95846
|
|
Moquette publishes Last-Will messages without enforcin…
|
moquette-io
|
moquette
|
2026-09-23T16:29:54.130Z |
2026-09-24T14:21:44.180Z |