|
cve-2026-16346
|
9.9 (v3.1)
|
DataStage on Cloud Pak for Data has several vulnerabilities
|
IBM
|
DataStage on Cloud Pak for Data
|
2026-09-22T21:21:46.679Z |
2026-09-23T18:56:56.090Z |
|
cve-2026-15915
|
6.2 (v3.1)
|
Multiple Vulnerabilities in IBM Concert Software
|
IBM
|
Concert
|
2026-09-22T21:21:03.085Z |
2026-09-23T18:56:57.832Z |
|
cve-2025-12767
|
5.3 (v3.1)
|
Multiple Vulnerabilities in IBM Concert Software
|
IBM
|
Concert
|
2026-09-22T21:20:34.808Z |
2026-09-23T14:35:50.543Z |
|
cve-2025-36084
|
5.9 (v3.1)
|
Multiple Vulnerabilities in IBM Concert Software
|
IBM
|
Concert
|
2026-09-22T21:20:10.599Z |
2026-09-23T15:04:13.352Z |
|
cve-2026-75101
|
6 (v4.0)
|
Authorization bypass vulnerability in GitHub Enterpris…
|
GitHub
|
Enterprise Server
|
2026-09-22T20:43:59.193Z |
2026-09-23T15:04:47.704Z |
|
cve-2026-77912
|
7.4 (v4.0)
|
Stored cross-site scripting vulnerability in GitHub En…
|
GitHub
|
Enterprise Server
|
2026-09-22T20:43:56.061Z |
2026-09-23T15:05:17.200Z |
|
cve-2026-77987
|
9.3 (v4.0)
|
GitHub Enterprise Server notebook viewer vulnerable to…
|
GitHub
|
Enterprise Server
|
2026-09-22T20:43:53.715Z |
2026-09-23T15:26:58.923Z |
|
cve-2026-88020
|
6.1 (v3.1)
5.3 (v4.0)
|
Improper Neutralization of Input During Web Page Gener…
|
Autonomy Logic
|
OpenPLC Runtime
|
2026-09-22T20:40:26.449Z |
2026-09-23T15:05:45.280Z |
|
cve-2026-96260
|
6.5 (v3.1)
|
Mattermost server missing request body size limit on p…
|
Mattermost
|
Mattermost
|
2026-09-22T20:34:49.141Z |
2026-09-23T15:06:07.254Z |
|
cve-2026-96259
|
5.5 (v3.1)
|
Mattermost server-side request forgery via OAuth endpo…
|
Mattermost
|
Mattermost
|
2026-09-22T20:34:20.872Z |
2026-09-23T13:10:47.754Z |
|
cve-2026-96269
|
7.5 (v4.0)
|
GNU Emacs 28.1 through 31.1 allows arbitrary code…
|
GNU
|
Emacs
|
2026-09-22T20:32:40.834Z |
2026-09-24T01:51:40.685Z |
|
cve-2026-77426
|
|
Unleash: Missing await on permission check + cross-pro…
|
Unleash
|
unleash
|
2026-09-22T20:31:36.749Z |
2026-09-23T15:07:08.906Z |
|
cve-2026-67615
|
8.7 (v4.0)
8.8 (v3.1)
|
openEQUELLA < 2026.1.0 Authenticated RCE via Java Dese…
|
Apereo Foundation
|
openEQUELLA
|
2026-09-22T20:30:55.804Z |
2026-10-29T12:26:19.723Z |
|
cve-2026-77425
|
|
Unleash: A project member can reorder activation strat…
|
Unleash
|
unleash
|
2026-09-22T20:28:58.895Z |
2026-09-23T13:09:43.847Z |
|
cve-2026-91018
|
8.8 (v3.1)
8.7 (v4.0)
|
Double Free in lwIP (lightweight IP)
|
lwIP
|
lwIP API
|
2026-09-22T20:25:33.530Z |
2026-09-23T13:05:15.963Z |
|
cve-2026-76910
|
|
Unleash: Clone-feature lets a user copy a feature from…
|
Unleash
|
unleash
|
2026-09-22T20:21:35.069Z |
2026-09-23T19:40:00.468Z |
|
cve-2026-95815
|
7.2 (v4.0)
6.3 (v3.1)
|
OpenClaw iOS before 2026.8.11 Credential Exposure via …
|
OpenClaw
|
OpenClaw iOS
|
2026-09-22T20:21:15.030Z |
2026-09-23T14:35:59.404Z |
|
cve-2026-95814
|
8.6 (v4.0)
8.1 (v3.1)
|
Vaultwarden through 1.37.3 Authorization Bypass via Mi…
|
dani-garcia
|
vaultwarden
|
2026-09-22T20:21:13.488Z |
2026-09-23T12:51:17.228Z |
|
cve-2026-95813
|
5.3 (v4.0)
6.1 (v3.1)
|
e621ng before 26.09.16 Open Redirect via URL Parameters
|
e621ng
|
e621ng
|
2026-09-22T20:21:11.309Z |
2026-09-26T00:11:26.036Z |
|
cve-2026-95812
|
5.3 (v4.0)
6.1 (v3.1)
|
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Quer…
|
MacWarrior
|
clipbucket-v5
|
2026-09-22T20:21:10.251Z |
2026-10-06T13:37:06.270Z |
|
cve-2026-76909
|
|
Unleash: CR-approval email renders user-controlled raw HTML
|
Unleash
|
unleash
|
2026-09-22T20:18:25.219Z |
2026-09-23T14:36:10.937Z |
|
cve-2026-62364
|
|
wlc may disclose API tokens to project-configured URLs
|
WeblateOrg
|
wlc
|
2026-09-22T20:17:06.907Z |
2026-09-26T00:10:18.488Z |
|
cve-2026-94450
|
7.5 (v3.1)
8.7 (v4.0)
|
Potential denial of service when configured to send Re…
|
AWS
|
s2n-quic
|
2026-09-22T20:04:44.360Z |
2026-10-20T18:11:41.209Z |
|
cve-2026-79767
|
|
Gardener: Authorization Bypass via Group Subject Injection
|
gardener
|
gardener
|
2026-09-22T19:58:00.090Z |
2026-09-23T14:36:18.501Z |
|
cve-2026-61570
|
|
MPXJ: XXE Vulnerability in MerlinReader
|
joniles
|
mpxj
|
2026-09-22T19:56:08.061Z |
2026-09-24T15:19:20.083Z |
|
cve-2026-65829
|
|
MPXJ: Potential Path Traversal Vulnerability in Primav…
|
joniles
|
mpxj
|
2026-09-22T19:54:19.224Z |
2026-09-23T12:41:05.423Z |
|
cve-2026-77322
|
|
SIPGO: DoS via unvalidated WebSocket frame length
|
emiago
|
sipgo
|
2026-09-22T19:52:12.441Z |
2026-09-23T15:08:21.990Z |
|
cve-2026-58268
|
|
SIPGO: DoS via unvalidated Content-Length in the strea…
|
emiago
|
sipgo
|
2026-09-22T19:49:09.625Z |
2026-09-23T12:38:58.270Z |
|
cve-2026-87121
|
9.8 (v3.1)
9.3 (v4.0)
|
Out-of-bounds write in lwIP TCP/IP Stack MQTT Client A…
|
lwIP
|
TCP/IP Stack MQTT
|
2026-09-22T19:48:25.046Z |
2026-09-22T20:23:09.069Z |
|
cve-2026-83805
|
|
Nautobot: Authorization bypass in approval workflow RE…
|
nautobot
|
nautobot
|
2026-09-22T19:47:42.826Z |
2026-09-26T00:09:18.288Z |