|
cve-2026-94536
|
|
lamp-cloud through 5.10.0 Unauthorized Information Dis…
|
dromara
|
lamp-cloud
|
2026-09-21T21:28:15.614Z |
2026-09-23T15:19:33.125Z |
|
cve-2026-94535
|
|
lamp-cloud through 5.10.0 Unauthorized Notification Deletion
|
dromara
|
lamp-cloud
|
2026-09-21T21:28:14.554Z |
2026-09-22T13:28:50.254Z |
|
cve-2026-94534
|
|
lamp-cloud through 5.10.0 Unauthorized Profile Modific…
|
dromara
|
lamp-cloud
|
2026-09-21T21:28:13.569Z |
2026-09-22T17:45:03.746Z |
|
cve-2026-94533
|
|
lamp-cloud through 5.10.0 Unauthorized File Download v…
|
dromara
|
lamp-cloud
|
2026-09-21T21:28:12.305Z |
2026-09-22T13:02:43.860Z |
|
cve-2026-94532
|
|
lamp-cloud through 5.10.0 Unauthorized User Profile Ac…
|
dromara
|
lamp-cloud
|
2026-09-21T21:28:11.325Z |
2026-09-24T22:50:33.031Z |
|
cve-2026-93340
|
7.4 (v4.0)
6.8 (v3.1)
|
Gladys Assistant < 5.1.0 Password Reset Link Poisoning…
|
Gladys Assistant
|
Gladys Assistant
|
2026-09-21T21:21:58.925Z |
2026-10-01T15:21:57.753Z |
|
cve-2026-61541
|
|
Zapros has an Unbounded Content-Encoding decompression…
|
kap-sh
|
zapros
|
2026-09-21T21:21:21.321Z |
2026-09-23T19:07:58.617Z |
|
cve-2026-59830
|
|
Discourse: Stored XSS via unescaped actor name in post…
|
discourse
|
discourse
|
2026-09-21T21:17:38.733Z |
2026-09-22T15:38:41.155Z |
|
cve-2026-46650
|
|
Joplin: Stored XSS in public share viewer via javascri…
|
laurent22
|
joplin
|
2026-09-21T21:16:12.297Z |
2026-09-29T13:57:46.486Z |
|
cve-2026-17054
|
5.3 (v3.1)
|
Out-of-bounds read and permanent loss of Wi-Fi recepti…
|
zephyrproject
|
zephyr
|
2026-09-21T21:16:05.314Z |
2026-09-22T15:51:55.360Z |
|
cve-2026-15890
|
5.3 (v3.1)
|
AEAD nonce reuse in Zephyr secure_storage ITS default …
|
zephyrproject
|
zephyr
|
2026-09-21T21:16:04.169Z |
2026-10-15T22:10:21.479Z |
|
cve-2026-59815
|
|
Joplin: Pending share recipients can write items into …
|
laurent22
|
joplin
|
2026-09-21T21:15:15.882Z |
2026-09-24T22:49:51.891Z |
|
cve-2026-55210
|
|
Joplin: SAML SSO account takeover via email-based acco…
|
laurent22
|
joplin
|
2026-09-21T21:14:31.267Z |
2026-09-22T13:07:10.486Z |
|
cve-2026-61652
|
|
Zapros: Streaming decoders ignored the requested chunk…
|
kap-sh
|
zapros
|
2026-09-21T21:13:26.969Z |
2026-09-22T14:41:07.283Z |
|
cve-2026-59814
|
|
Joplin: Stored XSS via inline-served note attachment o…
|
laurent22
|
joplin
|
2026-09-21T21:13:17.395Z |
2026-09-22T13:29:52.943Z |
|
cve-2026-61647
|
|
@roomi-fields/notebooklm-mcp has path traversal in vau…
|
roomi-fields
|
notebooklm-mcp
|
2026-09-21T21:00:58.673Z |
2026-09-22T15:38:52.069Z |
|
cve-2026-55105
|
|
Joplin: Fountain embeds allow arbitrary script executi…
|
laurent22
|
joplin
|
2026-09-21T20:59:52.292Z |
2026-09-24T22:48:03.831Z |
|
cve-2026-46649
|
|
Joplin: SSO Auth Code Login Missing Rate Limiting — 9-…
|
laurent22
|
joplin
|
2026-09-21T20:58:04.456Z |
2026-09-28T20:18:49.471Z |
|
cve-2026-55179
|
|
Joplin: Logic error in Joplin Server allows a signed-i…
|
laurent22
|
joplin
|
2026-09-21T20:56:31.906Z |
2026-09-22T13:08:49.691Z |
|
cve-2026-59816
|
|
Joplin: Path traversal in transcribe proxy endpoint vi…
|
laurent22
|
joplin
|
2026-09-21T20:54:39.684Z |
2026-09-22T13:30:48.089Z |
|
cve-2026-49449
|
|
Joplin: KaTeX `trust:true` enables URL-allowlist bypas…
|
laurent22
|
joplin
|
2026-09-21T20:52:11.164Z |
2026-09-28T20:15:24.088Z |
|
cve-2026-49453
|
|
Joplin: Path traversal in resource sync — silent arbit…
|
laurent22
|
joplin
|
2026-09-21T20:50:28.455Z |
2026-09-22T13:31:37.953Z |
|
cve-2026-49450
|
|
Joplin desktop Windows auto-updater accepts signed ins…
|
laurent22
|
joplin
|
2026-09-21T20:49:04.423Z |
2026-09-22T13:12:32.859Z |
|
cve-2026-79919
|
|
MaxKB function-library sandbox escape: dlopen stack-ch…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:48:02.944Z |
2026-09-22T15:39:00.922Z |
|
cve-2026-79918
|
|
MaxKB: Sandbox escape via unhooked fexecve
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:47:13.575Z |
2026-09-24T22:46:09.086Z |
|
cve-2026-94588
|
4.4 (v3.1)
|
In Proxmox pmg-api, an argument injection vulnera…
|
Proxmox
|
pmg-api
|
2026-09-21T20:46:23.309Z |
2026-09-24T20:11:48.315Z |
|
cve-2026-77517
|
|
MaxKB cross-knowledge IDOR lets a normal user read and…
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:46:19.540Z |
2026-09-22T13:17:22.344Z |
|
cve-2026-77521
|
|
MaxKB: Prompt-injectable agent can lead to command execution
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:45:14.750Z |
2026-09-22T13:32:19.198Z |
|
cve-2026-94424
|
|
Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.…
|
Moore Threads
|
MTT S80 Driver Package
|
2026-09-21T20:45:09.555Z |
2026-09-22T18:04:06.485Z |
|
cve-2026-77522
|
|
MaxKB: Authenticated full-read SSRF via the knowledge …
|
1Panel-dev
|
MaxKB
|
2026-09-21T20:44:17.597Z |
2026-09-24T22:45:01.746Z |