|
cve-2026-85747
|
|
Distribution: Client `manifests.Get()` does not verify…
|
distribution
|
distribution
|
2026-10-13T18:20:56.539Z |
2026-10-18T13:38:36.137Z |
|
cve-2026-107381
|
|
svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>`…
|
darylldoyle
|
svg-sanitizer
|
2026-10-14T14:53:40.415Z |
2026-10-18T13:36:27.865Z |
|
cve-2026-78433
|
N/A
|
Gitea private attachment disclosure through repository…
|
Gitea
|
Gitea
|
2026-10-14T14:38:17.247Z |
2026-10-18T13:35:37.544Z |
|
cve-2026-73802
|
N/A
|
Gitea Runner host isolation bypass through container options
|
Gitea
|
Gitea Runner
|
2026-10-14T14:37:55.141Z |
2026-10-18T13:34:49.826Z |
|
cve-2026-73800
|
N/A
|
Gitea reusable workflow secret exposure in pull_reques…
|
Gitea
|
Gitea
|
2026-10-14T14:37:49.783Z |
2026-10-18T13:33:34.382Z |
|
cve-2026-73539
|
N/A
|
Gitea external renderer argument injection and code ex…
|
Gitea
|
Gitea
|
2026-10-14T14:37:44.243Z |
2026-10-18T13:32:51.154Z |
|
cve-2026-73535
|
N/A
|
Gitea second-factor bypass through OpenID identity linking
|
Gitea
|
Gitea
|
2026-10-14T14:37:39.073Z |
2026-10-18T13:32:08.609Z |
|
cve-2026-60021
|
N/A
|
Gitea GitLab migration denial of service
|
Gitea
|
Gitea
|
2026-10-14T14:28:46.424Z |
2026-10-18T13:31:27.676Z |
|
cve-2026-70396
|
N/A
|
Gitea organization repository creation token scope bypass
|
Gitea
|
Gitea
|
2026-10-14T14:36:36.550Z |
2026-10-18T13:31:06.460Z |
|
cve-2026-111889
|
5.3 (v4.0)
4.3 (v3.1)
|
phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:13.883Z |
2026-10-18T13:26:41.571Z |
|
cve-2026-111887
|
6.9 (v4.0)
5.3 (v3.1)
|
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-bet…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:12.494Z |
2026-10-18T13:26:01.243Z |
|
cve-2026-111886
|
7.1 (v4.0)
6.5 (v3.1)
|
phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-For…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:11.821Z |
2026-10-18T13:25:20.125Z |
|
cve-2026-111885
|
7 (v4.0)
5.5 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authori…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:11.116Z |
2026-10-18T13:24:35.633Z |
|
cve-2026-111677
|
6.8 (v4.0)
5.5 (v3.1)
|
Antiword through 0.37 Heap Out-of-Bounds Read via vGet…
|
Adri van Os
|
antiword
|
2026-10-16T17:39:36.663Z |
2026-10-18T12:26:10.819Z |
|
cve-2026-108950
|
6.9 (v4.0)
5.3 (v3.1)
|
Open Source Social Network (OSSN) through 10.1 Missing…
|
opensource-socialnetwork
|
opensource-socialnetwork
|
2026-10-12T12:13:03.464Z |
2026-10-18T12:23:33.743Z |
|
cve-2026-109645
|
7.1 (v4.0)
6.5 (v3.1)
|
Frappe ERPNext before 15.119.0 Unauthorized Record Cre…
|
frappe
|
erpnext
|
2026-10-12T22:22:19.345Z |
2026-10-18T12:23:33.599Z |
|
cve-2026-109650
|
7.1 (v4.0)
6.5 (v3.1)
|
Frappe ERPNext before 15.112.0 Missing Authorization E…
|
frappe
|
erpnext
|
2026-10-12T22:22:22.629Z |
2026-10-18T12:23:33.461Z |
|
cve-2026-109655
|
7.1 (v4.0)
6.5 (v3.1)
|
Frappe ERPNext before 15.115.0 Missing Authorization i…
|
frappe
|
erpnext
|
2026-10-12T22:22:25.822Z |
2026-10-18T12:23:33.321Z |
|
cve-2026-109660
|
7.1 (v4.0)
6.5 (v3.1)
|
Frappe ERPNext before 15.112.0 Missing Authorization i…
|
frappe
|
erpnext
|
2026-10-12T22:22:28.973Z |
2026-10-18T12:23:33.178Z |
|
cve-2026-109665
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe ERPNext before 15.108.0 Missing Authorization A…
|
frappe
|
erpnext
|
2026-10-12T22:22:32.224Z |
2026-10-18T12:23:33.036Z |
|
cve-2026-109670
|
5.1 (v4.0)
5.4 (v3.1)
|
Frappe ERPNext before 15.110.0 Stored XSS via Item Rec…
|
frappe
|
erpnext
|
2026-10-12T22:22:35.500Z |
2026-10-18T12:23:32.880Z |
|
cve-2026-109675
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe Suite before commit 2697564 Broken Access Contr…
|
frappe
|
suite
|
2026-10-12T22:22:38.881Z |
2026-10-18T12:23:32.737Z |
|
cve-2026-111882
|
8.6 (v4.0)
8.1 (v3.1)
|
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha befo…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:09.750Z |
2026-10-18T12:23:32.006Z |
|
cve-2026-112009
|
6.8 (v4.0)
5.5 (v3.1)
|
smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsy…
|
icculus
|
smpeg
|
2026-10-18T11:38:31.991Z |
2026-10-18T12:23:31.861Z |
|
cve-2026-112010
|
6.8 (v4.0)
5.5 (v3.1)
|
smpeg through 2.0.0 Integer Underflow via stream_heade…
|
icculus
|
smpeg
|
2026-10-18T11:38:32.683Z |
2026-10-18T12:23:31.721Z |
|
cve-2026-112015
|
7.7 (v4.0)
7.5 (v3.1)
|
Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Ag…
|
omnigent-ai
|
omnigent
|
2026-10-18T11:38:36.085Z |
2026-10-18T12:23:31.576Z |
|
cve-2026-111884
|
8.7 (v4.0)
8.3 (v3.1)
|
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-bet…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:10.426Z |
2026-10-18T12:18:30.268Z |
|
cve-2026-108874
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-11T14:33:37.191Z |
2026-10-18T12:13:30.887Z |
|
cve-2026-108879
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVar…
|
jeecgboot
|
JeecgBoot
|
2026-10-11T14:33:41.213Z |
2026-10-18T12:13:30.729Z |
|
cve-2026-108884
|
5.3 (v4.0)
5.4 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via sysM…
|
jeecgboot
|
JeecgBoot
|
2026-10-11T14:33:44.647Z |
2026-10-18T12:13:30.567Z |