|
cve-2026-61628
|
|
nginx ignition has Unauthenticated Admin Account Creat…
|
lucasdillmann
|
nginx-ignition
|
2026-09-21T14:44:54.985Z |
2026-09-21T15:12:59.314Z |
|
cve-2026-94301
|
9.8 (v3.1)
|
Apache MINA: CVE-2026-47065 resolveProxyClass fix miss…
|
Apache Software Foundation
|
Apache MINA
|
2026-09-21T14:35:59.952Z |
2026-09-22T03:55:53.783Z |
|
cve-2026-86473
|
|
Apache Airflow: Logout ignores a presented Authorizati…
|
Apache Software Foundation
|
Apache Airflow
|
2026-09-21T14:33:26.110Z |
2026-11-03T07:00:53.240Z |
|
cve-2026-75158
|
|
Apache Airflow: Assets events API returns asset events…
|
Apache Software Foundation
|
Apache Airflow
|
2026-09-21T14:32:47.818Z |
2026-11-03T07:00:41.233Z |
|
cve-2026-82355
|
|
Apache Airflow: Session cookie silently overrides expl…
|
Apache Software Foundation
|
Apache Airflow
|
2026-09-21T14:32:04.932Z |
2026-11-03T07:00:47.198Z |
|
cve-2026-93339
|
5.1 (v4.0)
5.4 (v3.1)
|
Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute
|
Metaphor Creations
|
Ditty
|
2026-09-21T14:29:21.891Z |
2026-10-01T15:21:57.078Z |
|
cve-2026-52743
|
|
GoCD before 26.1.0 is vulnerable to authorization bypa…
|
gocd
|
gocd
|
2026-09-21T14:24:57.713Z |
2026-09-25T19:23:52.915Z |
|
cve-2026-55074
|
|
Ansible FreeBSD Jail Connection Plugin: Jail escape vi…
|
chofstede
|
ansible_jailexec
|
2026-09-21T14:24:55.995Z |
2026-09-21T15:44:36.603Z |
|
cve-2026-55567
|
|
BleachBit: Exploit File Delete to Escalate Privilege
|
bleachbit
|
bleachbit
|
2026-09-21T14:23:42.014Z |
2026-09-21T15:16:03.499Z |
|
cve-2026-61629
|
|
nginx ignition has ParseAcceptLanguage `_` separator …
|
lucasdillmann
|
nginx-ignition
|
2026-09-21T14:22:34.126Z |
2026-09-24T22:11:44.377Z |
|
cve-2026-94184
|
5.3 (v3.1)
|
Fetchmail: fetchmail: stack-based buffer overflow in n…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-21T14:17:16.053Z |
2026-11-06T02:12:49.602Z |
|
cve-2026-61630
|
|
nginx ignition has TOTP Reuse During Validity Window
|
lucasdillmann
|
nginx-ignition
|
2026-09-21T14:17:11.371Z |
2026-09-21T20:46:12.049Z |
|
cve-2026-55071
|
|
MCP-for-Stata: Stata Command Injection via Unsanitized…
|
SepineTam
|
mcp-for-stata
|
2026-09-21T14:09:30.169Z |
2026-09-21T14:56:37.752Z |
|
cve-2026-54584
|
|
mport trusts environment-controlled temporary director…
|
MidnightBSD
|
mport
|
2026-09-21T14:05:48.447Z |
2026-09-25T19:23:13.124Z |
|
cve-2026-80110
|
8.1 (v3.1)
|
Pki-core: dogtag pki v2 rest acl filter's reverse-lexi…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-21T14:05:16.656Z |
2026-11-04T23:41:08.886Z |
|
cve-2026-75939
|
7.4 (v3.1)
|
Openshift/oc-mirror: release signature verification: o…
|
Red Hat
|
Red Hat OpenShift Container Platform 4.18
|
2026-09-21T14:05:10.429Z |
2026-11-06T22:43:22.529Z |
|
cve-2026-94404
|
7.1 (v4.0)
|
MISP CSRF vulnerability allows unauthorized attribute …
|
MISP
|
MISP
|
2026-09-21T13:50:46.410Z |
2026-09-21T14:48:16.245Z |
|
cve-2026-88807
|
8.9 (v4.0)
|
libXrender RenderQueryPictFormats Reply Heap-based Buf…
|
X.org
|
libXrender
|
2026-09-21T13:49:21.327Z |
2026-09-22T03:55:46.845Z |
|
cve-2026-94387
|
5.1 (v4.0)
5.4 (v3.1)
|
Aureus ERP before 1.6.0 Stored XSS via Chatter Field-C…
|
Webkul
|
Aureus ERP
|
2026-09-21T13:43:36.234Z |
2026-10-06T13:37:04.825Z |
|
cve-2025-71421
|
8.6 (v4.0)
7.2 (v3.1)
|
UVdesk core-framework before 1.1.7 Privilege Escalatio…
|
uvdesk
|
core-framework
|
2026-09-21T13:43:35.237Z |
2026-10-06T13:36:47.475Z |
|
cve-2025-71420
|
5.3 (v4.0)
4.3 (v3.1)
|
UVdesk core-framework before 1.1.7 Authorization Bypas…
|
uvdesk
|
core-framework
|
2026-09-21T13:43:34.312Z |
2026-10-06T13:36:46.572Z |
|
cve-2025-71419
|
5.1 (v4.0)
5.4 (v3.1)
|
UVdesk core-framework before 1.1.7 Stored XSS via Swif…
|
uvdesk
|
core-framework
|
2026-09-21T13:43:33.353Z |
2026-10-06T13:36:45.739Z |
|
cve-2026-88806
|
7.5 (v3.1)
|
libX11 XkbGetMap Reply Heap-based Buffer Overflow
|
x.org
|
libX11
|
2026-09-21T13:42:12.700Z |
2026-09-22T03:55:48.003Z |
|
cve-2026-94401
|
8.3 (v4.0)
|
MISP Arbitrary Local File Read and SSRF via MISP Expor…
|
MISP
|
MISP
|
2026-09-21T13:36:13.066Z |
2026-09-21T14:48:16.804Z |
|
cve-2026-94394
|
6.3 (v4.0)
|
MISP ObjectReferencesController: Granular Distribution…
|
MISP
|
MISP
|
2026-09-21T13:25:40.360Z |
2026-09-21T14:48:16.963Z |
|
cve-2026-94393
|
6.4 (v4.0)
|
MISP Event Report Cross-Event Reparenting via Unscoped…
|
MISP
|
MISP
|
2026-09-21T13:14:00.619Z |
2026-09-21T15:18:17.855Z |
|
cve-2026-85220
|
3.7 (v3.1)
|
Denial-of-Service in the Thinkst Canary Redis service
|
Thinkst Applied Research
|
Canary
|
2026-09-21T13:13:53.053Z |
2026-09-21T14:48:17.169Z |
|
cve-2026-94382
|
2.3 (v4.0)
4.2 (v3.1)
|
Beszel before 0.19.0 Insecure Direct Object Reference …
|
henrygd
|
beszel
|
2026-09-21T12:59:39.971Z |
2026-09-21T14:12:10.208Z |
|
cve-2026-94383
|
8.6 (v4.0)
|
MISP Blocklist Workflow Module: Arbitrary Script Execu…
|
MISP
|
MISP
|
2026-09-21T12:52:03.355Z |
2026-09-21T14:48:17.369Z |
|
cve-2026-94216
|
|
ST Engineering iDirect iDX/Evo iDX HTTP Request author…
|
ST Engineering iDirect
|
iDX
|
2026-09-21T12:45:08.228Z |
2026-10-14T15:43:42.236Z |