|
cve-2026-94414
|
|
jshERP through 3.6 Missing Authorization via updateBtnStr
|
jishenghua
|
jshERP
|
2026-09-21T18:16:13.884Z |
2026-09-21T18:36:16.428Z |
|
cve-2026-94413
|
|
jshERP through 3.6 Password Hash Disclosure via /user/info
|
jishenghua
|
jshERP
|
2026-09-21T18:16:12.781Z |
2026-09-22T17:45:15.909Z |
|
cve-2026-94412
|
|
jshERP through 3.6 Authorization Bypass via resetPwd
|
jishenghua
|
jshERP
|
2026-09-21T18:16:11.624Z |
2026-09-21T19:04:11.823Z |
|
cve-2026-94411
|
|
jshERP 3.6 Privilege Escalation via updateOneValueByKe…
|
jishenghua
|
jshERP
|
2026-09-21T18:16:10.450Z |
2026-09-24T22:27:20.337Z |
|
cve-2026-82163
|
5.5 (v3.1)
|
Dell Command | Intel vPro Out of Band, versions p…
|
Dell
|
Command | Intel vPro Out of Band
|
2026-09-21T18:12:09.167Z |
2026-09-21T19:03:05.046Z |
|
cve-2026-66280
|
N/A
|
{'providerMetadata': {'orgId': '030b2754-1501-44a4-bef8-48be86a33bf4', 'shortName': 'Silabs', 'dateUpdated': '2026-09-21T18:05:53.457Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}}
|
N/A
|
N/A
|
2026-09-21T18:04:21.221Z |
2026-09-21T18:05:53.457Z |
|
cve-2026-61745
|
|
InvenTree: Missing authorization on machine restart en…
|
inventree
|
InvenTree
|
2026-09-21T17:52:39.111Z |
2026-09-21T18:35:40.123Z |
|
cve-2026-69190
|
|
Graylog: Manager-to-Owner privilege escalation on save…
|
Graylog2
|
graylog2-server
|
2026-09-21T17:46:30.702Z |
2026-09-21T19:02:27.809Z |
|
cve-2026-55473
|
|
HomeBox: Notifier SSRF guard misses NAT64 prefixes (64…
|
sysadminsmedia
|
homebox
|
2026-09-21T17:44:41.474Z |
2026-09-29T14:14:58.208Z |
|
cve-2026-48826
|
|
HomeBox: Cross-Group Inventory Wipe in Homebox via Glo…
|
sysadminsmedia
|
homebox
|
2026-09-21T17:43:43.510Z |
2026-09-21T20:44:50.012Z |
|
cve-2026-48974
|
|
HomeBox: Forced Group Membership Without Consent in Ho…
|
sysadminsmedia
|
homebox
|
2026-09-21T17:42:59.002Z |
2026-09-29T14:13:34.983Z |
|
cve-2026-48975
|
|
HomeBox: Cross-Tenant IDOR in MaintenanceEntry Update …
|
sysadminsmedia
|
homebox
|
2026-09-21T17:42:14.826Z |
2026-09-21T19:01:16.954Z |
|
cve-2026-48976
|
|
HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Sh…
|
sysadminsmedia
|
homebox
|
2026-09-21T17:41:16.889Z |
2026-09-21T17:50:27.156Z |
|
cve-2026-62182
|
|
KubeEdge: ConfigUpdateJob updateFields enables remote …
|
kubeedge
|
kubeedge
|
2026-09-21T17:37:45.702Z |
2026-09-24T22:25:52.960Z |
|
cve-2026-61612
|
|
@aborruso/ckan-mcp-server has SSRF via DNS-name → inte…
|
ondata
|
ckan-mcp-server
|
2026-09-21T17:37:17.030Z |
2026-09-21T20:44:57.500Z |
|
cve-2026-94488
|
8.3 (v4.0)
8.2 (v3.1)
|
Telegram Desktop before 6.9.4 allows XSS in the H…
|
Telegram
|
Telegram Desktop
|
2026-09-21T17:29:01.776Z |
2026-09-21T17:51:18.874Z |
|
cve-2026-92382
|
4.1 (v3.1)
|
Usbredir: usbredir: unbounded iso_packet_desc[] index …
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-21T17:28:21.411Z |
2026-11-06T01:48:22.964Z |
|
cve-2026-93012
|
N/A
|
Email::Sender::Transport::Sendmail versions before 2.6…
|
|
|
2026-09-21T17:19:27.569Z |
2026-09-22T19:26:34.492Z |
|
cve-2026-62369
|
|
KubeEdge: keadm DecompressTarGz path traversal enables…
|
kubeedge
|
kubeedge
|
2026-09-21T17:10:57.979Z |
2026-09-24T22:24:33.145Z |
|
cve-2026-62370
|
|
KubeEdge: Unbounded allocation in viaduct packer enabl…
|
kubeedge
|
kubeedge
|
2026-09-21T17:07:31.398Z |
2026-09-29T15:04:07.804Z |
|
cve-2026-62371
|
|
KubeEdge: Command Injection in NodeUpgradeJob - RCE on…
|
kubeedge
|
kubeedge
|
2026-09-21T17:02:52.268Z |
2026-09-21T18:59:36.168Z |
|
cve-2026-94449
|
7.5 (v3.1)
|
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fau…
|
Red Hat
|
Red Hat Build of Apache Camel 3.33.4.redhat
|
2026-09-21T17:01:48.617Z |
2026-11-06T00:01:32.878Z |
|
cve-2026-63116
|
|
deepstream: PATCH_MULTI action bypasses Valve permissi…
|
deepstreamIO
|
deepstream.io
|
2026-09-21T16:59:22.958Z |
2026-09-21T17:59:34.586Z |
|
cve-2026-59168
|
|
Dasel: Unbounded recursion in JSON and XML readers cau…
|
TomWright
|
dasel
|
2026-09-21T16:55:07.859Z |
2026-09-21T20:45:17.805Z |
|
cve-2026-62866
|
|
Dasel: Selector lexer panics on trailing whitespace in…
|
TomWright
|
dasel
|
2026-09-21T16:51:18.520Z |
2026-09-21T18:00:18.178Z |
|
cve-2026-77561
|
|
Tinyauth: Unauthenticated login attempts can trigger g…
|
tinyauthapp
|
tinyauth
|
2026-09-21T16:48:21.732Z |
2026-09-24T22:23:12.221Z |
|
cve-2026-77582
|
|
Tinyauth: User enumeration attack by timing oracle
|
tinyauthapp
|
tinyauth
|
2026-09-21T16:43:43.175Z |
2026-09-23T19:16:39.000Z |
|
cve-2026-17051
|
6 (v3.1)
|
Out-of-bounds write in the Intel SEDI IPM driver from …
|
zephyrproject
|
zephyr
|
2026-09-21T16:41:24.528Z |
2026-11-04T05:00:22.472Z |
|
cve-2026-17050
|
5.7 (v3.1)
|
Double free of the USB host configuration descriptor w…
|
zephyrproject
|
zephyr
|
2026-09-21T16:41:23.472Z |
2026-11-04T05:00:18.222Z |
|
cve-2026-77560
|
|
Tinyauth: forward-auth per-app ACL is matched case-sen…
|
tinyauthapp
|
tinyauth
|
2026-09-21T16:39:18.606Z |
2026-09-21T20:45:26.170Z |