|
cve-2026-108891
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-11T14:33:48.063Z |
2026-10-18T12:13:30.403Z |
|
cve-2026-109181
|
5.3 (v4.0)
4.3 (v3.1)
|
jshERP through 3.6 Authorization Bypass via purchaseSt…
|
jishenghua
|
jshERP
|
2026-10-12T13:10:40.395Z |
2026-10-18T12:13:30.230Z |
|
cve-2026-109186
|
8.7 (v4.0)
8.8 (v3.1)
|
jshERP through 3.6 Mass Assignment via PUT /user/update
|
jishenghua
|
jshERP
|
2026-10-12T13:10:45.663Z |
2026-10-18T12:13:30.062Z |
|
cve-2026-109321
|
9.3 (v4.0)
9.1 (v3.1)
|
Grav Login OAuth Plugin before 1.4.3 Predictable Local…
|
getgrav
|
grav-plugin-login-oauth
|
2026-10-12T16:05:13.414Z |
2026-10-18T12:13:29.858Z |
|
cve-2026-109326
|
8.7 (v4.0)
7.5 (v3.1)
|
Grav before 2.1.7 Information Disclosure via Nested .g…
|
getgrav
|
grav
|
2026-10-12T16:05:17.303Z |
2026-10-18T12:13:29.706Z |
|
cve-2023-54410
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe before 13.22.0 Improper Authorization via Docum…
|
frappe
|
frappe
|
2026-10-12T22:21:42.075Z |
2026-10-18T12:13:29.550Z |
|
cve-2025-71430
|
5.1 (v4.0)
5.4 (v3.1)
|
Frappe before 15.91.1 Stored XSS via Leaderboard User Names
|
frappe
|
frappe
|
2026-10-12T22:21:46.441Z |
2026-10-18T12:13:29.396Z |
|
cve-2026-109599
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe before 15.113.3 Missing Authorization Allows Un…
|
frappe
|
frappe
|
2026-10-12T22:21:53.213Z |
2026-10-18T12:13:29.238Z |
|
cve-2026-109604
|
8.5 (v4.0)
7.3 (v3.1)
|
ERPNext before 15.112.0 Stored XSS via Tool View Recor…
|
frappe
|
erpnext
|
2026-10-12T22:21:56.499Z |
2026-10-18T12:13:29.087Z |
|
cve-2026-109612
|
8.5 (v4.0)
7.3 (v3.1)
|
Frappe ERPNext before 15.120.0 Stored XSS via Report View
|
frappe
|
erpnext
|
2026-10-12T22:21:59.712Z |
2026-10-18T12:13:28.928Z |
|
cve-2026-109617
|
7.1 (v4.0)
7.1 (v3.1)
|
Frappe ERPNext before 15.121.0 Missing Authorization i…
|
frappe
|
erpnext
|
2026-10-12T22:22:03.078Z |
2026-10-18T12:13:28.774Z |
|
cve-2026-109625
|
7.1 (v4.0)
6.5 (v3.1)
|
Frappe ERPNext before 15.121.3 Missing Authorization E…
|
frappe
|
erpnext
|
2026-10-12T22:22:06.397Z |
2026-10-18T12:13:28.616Z |
|
cve-2026-109630
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe ERPNext before 15.121.0 Missing Authorization i…
|
frappe
|
erpnext
|
2026-10-12T22:22:09.679Z |
2026-10-18T12:13:28.472Z |
|
cve-2026-109635
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe ERPNext before 15.105.0 Missing Authorization i…
|
frappe
|
erpnext
|
2026-10-12T22:22:12.936Z |
2026-10-18T12:13:28.316Z |
|
cve-2026-110835
|
6.3 (v4.0)
4 (v3.1)
|
FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via …
|
FreeRDP
|
FreeRDP
|
2026-10-14T22:52:10.348Z |
2026-10-18T12:10:18.505Z |
|
cve-2026-109951
|
6.9 (v4.0)
5.3 (v3.1)
|
FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via…
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:17.101Z |
2026-10-18T12:09:30.284Z |
|
cve-2026-109946
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via A…
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:13.792Z |
2026-10-18T12:08:53.452Z |
|
cve-2026-109941
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gatew…
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:10.704Z |
2026-10-18T12:08:12.069Z |
|
cve-2026-109679
|
6 (v4.0)
5.3 (v3.1)
|
FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash v…
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:07.606Z |
2026-10-18T12:07:32.761Z |
|
cve-2026-109640
|
7.2 (v4.0)
8.1 (v3.1)
|
Frappe ERPNext before 16.22.0 Missing Authorization Al…
|
frappe
|
erpnext
|
2026-10-12T22:22:16.189Z |
2026-10-18T12:03:18.129Z |
|
cve-2026-110615
|
7.1 (v4.0)
7.1 (v3.1)
|
jshERP through 3.6 Missing Authorization via /user/bat…
|
jishenghua
|
jshERP
|
2026-10-14T14:16:54.603Z |
2026-10-18T12:03:17.953Z |
|
cve-2026-111389
|
8.3 (v4.0)
7.7 (v3.1)
|
Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Mi…
|
frappe
|
hrms
|
2026-10-16T01:17:57.752Z |
2026-10-18T12:03:17.805Z |
|
cve-2026-108622
|
5.3 (v4.0)
5.4 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:19.977Z |
2026-10-18T12:03:17.662Z |
|
cve-2026-108627
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:23.277Z |
2026-10-18T12:03:17.500Z |
|
cve-2026-108632
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via sysD…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:26.647Z |
2026-10-18T12:03:17.353Z |
|
cve-2026-108637
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via dele…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:29.917Z |
2026-10-18T12:03:17.202Z |
|
cve-2026-108642
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncem…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:33.316Z |
2026-10-18T12:03:17.047Z |
|
cve-2026-108647
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:36.717Z |
2026-10-18T12:03:16.901Z |
|
cve-2026-108652
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:40.548Z |
2026-10-18T12:03:16.744Z |
|
cve-2026-108657
|
8.6 (v4.0)
8.1 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:43.999Z |
2026-10-18T12:03:16.580Z |