|
cve-2026-94381
|
8.7 (v4.0)
|
MISP Privilege Escalation: Read-Only API Key User Can …
|
MISP
|
MISP
|
2026-09-21T12:42:53.242Z |
2026-09-21T14:48:17.524Z |
|
cve-2026-94379
|
6.9 (v4.0)
|
MISP: HTTP Method Bypass of Login Security Controls (B…
|
MISP
|
MISP
|
2026-09-21T12:35:26.533Z |
2026-09-21T15:21:01.092Z |
|
cve-2026-94374
|
8.3 (v4.0)
|
MISP: IDOR via Client-Supplied Report ID in Module Res…
|
MISP
|
MISP
|
2026-09-21T12:25:02.628Z |
2026-09-21T15:21:57.870Z |
|
cve-2026-94373
|
6.3 (v4.0)
|
MISP DOM-based Cross-Site Scripting via innerHTML in C…
|
MISP
|
MISP
|
2026-09-21T12:16:47.877Z |
2026-09-21T15:22:31.730Z |
|
cve-2026-94214
|
|
ST Engineering iDirect iDX/Evo iDX Location Header redirect
|
ST Engineering iDirect
|
iDX
|
2026-09-21T12:15:08.559Z |
2026-10-14T15:43:22.482Z |
|
cve-2026-84285
|
8.8 (v3.1)
|
OS Command Injection vulnerability affecting Tuleap En…
|
Dassault Systèmes
|
Tuleap Enterprise Edition
|
2026-09-21T12:07:15.359Z |
2026-09-21T19:40:26.034Z |
|
cve-2026-94372
|
6.3 (v4.0)
|
Stored Cross-Site Scripting via Unescaped Galaxy Clust…
|
MISP
|
MISP
|
2026-09-21T12:02:17.104Z |
2026-09-21T15:23:04.003Z |
|
cve-2026-94211
|
|
Hyve5 Leantime Project Dashboard show.blade.php cross …
|
Hyve5
|
Leantime
|
2026-09-21T12:00:10.792Z |
2026-09-21T14:14:43.402Z |
|
cve-2026-94368
|
7.1 (v3.1)
|
Noobaa-core: noobaa-core: presigned put url escalation…
|
Red Hat
|
Red Hat Openshift Data Foundation 4
|
2026-09-21T11:45:12.776Z |
2026-09-25T06:45:02.664Z |
|
cve-2026-89139
|
8.7 (v4.0)
|
Temporal Server worker deployment compute provider exe…
|
Temporal Technologies, Inc.
|
Temporal Server
|
2026-09-21T11:41:23.342Z |
2026-09-21T15:24:46.549Z |
|
cve-2026-87858
|
7.2 (v4.0)
|
Temporal Server completion callback source header can …
|
Temporal Technologies, Inc.
|
Temporal Server
|
2026-09-21T11:39:52.412Z |
2026-09-21T15:25:30.901Z |
|
cve-2026-65654
|
8.7 (v4.0)
|
temporalio/ringpop-go fails to enforce configured labe…
|
Temporal Technologies, Inc.
|
temporalio/ringpop-go
|
2026-09-21T11:38:23.307Z |
2026-09-21T15:26:44.632Z |
|
cve-2026-65653
|
8.7 (v4.0)
|
temporalio/tchannel-go zero-chunk call fragment causes…
|
Temporal Technologies, Inc.
|
temporalio/tchannel-go
|
2026-09-21T11:36:47.095Z |
2026-09-21T15:28:21.825Z |
|
cve-2026-65652
|
8.7 (v4.0)
|
temporalio/tchannel-go malformed checksum type causes …
|
Temporal Technologies, Inc.
|
temporalio/tchannel-go
|
2026-09-21T11:35:40.896Z |
2026-09-21T15:30:00.325Z |
|
cve-2026-65651
|
8.7 (v4.0)
7.1 (v4.0)
6 (v4.0)
|
temporalio/sqlparser deeply nested unary expressions c…
|
Temporal Technologies, Inc.
|
temporalio/sqlparser
|
2026-09-21T11:34:05.930Z |
2026-09-21T15:31:05.352Z |
|
cve-2026-16651
|
8.7 (v4.0)
7.1 (v4.0)
|
temporalio/sqlparser malformed MySQL version comments …
|
Temporal Technologies, Inc.
|
temporalio/sqlparser
|
2026-09-21T11:32:44.699Z |
2026-09-21T15:32:34.656Z |
|
cve-2026-94210
|
|
Hyve5 Leantime Kanban Board Tickets.php getAllGrouped …
|
Hyve5
|
Leantime
|
2026-09-21T11:30:13.129Z |
2026-09-21T19:41:11.894Z |
|
cve-2026-91867
|
|
Apache Neethi: Remote policy fetch lacks a total timeo…
|
Apache Software Foundation
|
Apache Neethi
|
2026-09-21T11:27:45.131Z |
2026-09-21T13:15:19.316Z |
|
cve-2026-91866
|
|
Apache Neethi: Crafted policies cause unbounded work d…
|
Apache Software Foundation
|
Apache Neethi
|
2026-09-21T11:27:15.767Z |
2026-09-21T13:17:25.639Z |
|
cve-2026-91865
|
|
Apache Neethi: Crafted policy references cause exponen…
|
Apache Software Foundation
|
Apache Neethi
|
2026-09-21T11:26:52.788Z |
2026-09-21T13:17:03.972Z |
|
cve-2026-91864
|
|
Apache Neethi: Crafted WS-Policy documents bypass elem…
|
Apache Software Foundation
|
Apache Neethi
|
2026-09-21T11:26:20.054Z |
2026-09-21T13:27:39.838Z |
|
cve-2026-91863
|
|
Apache Neethi: Uncontrolled recursion while parsing cr…
|
Apache Software Foundation
|
Apache Neethi
|
2026-09-21T11:25:26.648Z |
2026-09-21T13:36:42.505Z |
|
cve-2026-16652
|
7.1 (v4.0)
|
Temporal Server Schedule exclusion search can cause ex…
|
Temporal Technologies, Inc.
|
Temporal Server
|
2026-09-21T11:23:47.298Z |
2026-09-21T15:33:15.387Z |
|
cve-2026-77021
|
|
Missing decompression size limit in agent receiver all…
|
Checkmk GmbH
|
Checkmk
|
2026-09-21T10:57:37.433Z |
2026-09-21T19:40:26.202Z |
|
cve-2026-92612
|
1 (v4.0)
|
In Eclipse iceoryx2 versions greater than v0.8.0,…
|
Eclipse Foundation
|
Eclipse iceoryx™
|
2026-09-21T10:47:02.731Z |
2026-09-21T11:09:34.304Z |
|
cve-2026-92574
|
8.8 (v3.1)
|
Cri-o: cri-o checkpoint restore bypasses destination s…
|
|
|
2026-09-21T09:49:49.679Z |
2026-11-05T00:09:26.840Z |
|
cve-2026-91921
|
5.1 (v4.0)
|
Cross-Site Scripting (XSS) in 1millionbot’s AI chatbot…
|
1millionbot
|
AI Chatbot Platform (SaaS) de 1millionbot.
|
2026-09-21T09:43:37.622Z |
2026-09-21T11:12:43.964Z |
|
cve-2026-94277
|
6.3 (v4.0)
|
Stored Cross-Site Scripting in MISP Galaxy Matrix Stat…
|
MISP
|
MISP
|
2026-09-21T09:25:04.966Z |
2026-09-21T11:16:10.434Z |
|
cve-2025-12999
|
9.1 (v4.0)
|
UrlUtil.getBaseUrl builds the absolute URLs in a …
|
Eclipse Foundation
|
Eclipse Open VSX
|
2026-09-21T08:59:00.465Z |
2026-09-30T15:09:36.585Z |
|
cve-2026-92400
|
|
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Un…
|
Unknown
|
Payment Gateway for PayPal on WooCommerce
|
2026-09-21T08:51:53.045Z |
2026-09-21T14:30:56.543Z |