|
cve-2026-102599
|
|
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
|
socketio
|
socket.io
|
2026-10-13T19:05:10.870Z |
2026-10-17T00:39:46.378Z |
|
cve-2026-110237
|
7 (v4.0)
7.3 (v3.1)
|
Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Own…
|
vifm
|
vifm
|
2026-10-13T18:50:18.056Z |
2026-10-17T00:38:50.515Z |
|
cve-2026-110232
|
4.6 (v4.0)
3.3 (v3.1)
|
Fossify File Manager through 1.6.2 Zip Slip Path Trave…
|
Fossify
|
Fossify File Manager
|
2026-10-13T18:50:14.767Z |
2026-10-17T00:38:03.358Z |
|
cve-2026-110226
|
5.3 (v4.0)
5.4 (v3.1)
|
QloApps through 1.7.0 Authorization Bypass via id_hote…
|
Webkul
|
QloApps
|
2026-10-13T18:50:11.477Z |
2026-10-16T22:32:49.105Z |
|
cve-2026-110221
|
5.1 (v4.0)
5.4 (v3.1)
|
QloApps through 1.7.0 Reflected XSS via Advanced Price…
|
Webkul
|
QloApps
|
2026-10-13T18:50:07.876Z |
2026-10-16T22:30:46.253Z |
|
cve-2026-110216
|
7.1 (v4.0)
7.1 (v3.1)
|
youlai-boot through 2.21.1 Missing Authorization in Us…
|
youlaitech
|
youlai-boot
|
2026-10-13T18:50:04.523Z |
2026-10-16T22:29:44.231Z |
|
cve-2026-110211
|
7.2 (v4.0)
8.1 (v3.1)
|
SkillHub through 0.2.22 Missing Authorization in CLI S…
|
iflytek
|
skillhub
|
2026-10-13T18:50:01.273Z |
2026-10-16T22:28:56.865Z |
|
cve-2026-110206
|
7.7 (v4.0)
8.8 (v3.1)
|
Roo-Code through 3.54.0 Auto-Approve Bypass via Comman…
|
RooCodeInc
|
Roo-Code
|
2026-10-13T18:49:58.125Z |
2026-10-16T22:27:58.356Z |
|
cve-2026-54086
|
|
SLE API for Java: Uncontrolled Memory Allocation / han…
|
esa
|
sleapi-j
|
2026-10-13T18:28:25.345Z |
2026-10-16T22:27:10.729Z |
|
cve-2026-109429
|
8.7 (v4.0)
8.8 (v3.1)
|
Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var…
|
mistralai
|
mistral-vibe
|
2026-10-13T18:22:07.548Z |
2026-10-16T22:25:43.826Z |
|
cve-2026-100133
|
9.3 (v3.1)
|
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
|
Adobe
|
Adobe Commerce
|
2026-10-13T18:15:47.406Z |
2026-10-16T22:24:50.982Z |
|
cve-2026-108381
|
|
dataclasses-avroschema pydantic-class metadata allows …
|
marcosschroh
|
dataclasses-avroschema
|
2026-10-13T17:43:11.422Z |
2026-10-16T22:23:59.982Z |
|
cve-2026-108376
|
|
dataclasses-avroschema allows code injection through r…
|
marcosschroh
|
dataclasses-avroschema
|
2026-10-13T17:17:07.502Z |
2026-10-16T22:23:01.639Z |
|
cve-2026-88833
|
6.5 (v3.1)
|
Busybox: busybox: udhcpc integer underflow in dhcp pac…
|
Red Hat
|
Red Hat Hardened Images
|
2026-10-13T16:56:11.068Z |
2026-10-16T22:22:10.834Z |
|
cve-2026-110128
|
8.7 (v4.0)
7.5 (v3.1)
|
fuint through commit 4c4bc8a Missing Authentication vi…
|
fushengqian
|
fuint
|
2026-10-13T16:53:21.745Z |
2026-10-16T22:19:46.107Z |
|
cve-2026-106549
|
N/A
|
{'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-16T22:19:45.461Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}
|
N/A
|
N/A
|
|
2026-10-16T22:19:45.461Z |
|
cve-2026-107346
|
N/A
|
{'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-16T22:19:45.332Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}
|
N/A
|
N/A
|
|
2026-10-16T22:19:45.332Z |
|
cve-2026-110123
|
7.1 (v4.0)
7.1 (v3.1)
|
Makunet maku-boot 4.3.0 through 5.0.0 Missing Authoriz…
|
makunet
|
maku-boot
|
2026-10-13T16:53:18.499Z |
2026-10-16T22:19:01.993Z |
|
cve-2026-110118
|
7.1 (v4.0)
6.5 (v3.1)
|
WorkFlow-Engine through 9.6.11 Missing Authorization v…
|
risesoft-y9
|
WorkFlow-Engine
|
2026-10-13T16:53:15.337Z |
2026-10-16T22:18:12.566Z |
|
cve-2026-110113
|
5.3 (v4.0)
4.3 (v3.1)
|
PublicCMS through V6.202608.a IDOR via tradeAddress/sa…
|
Sanluan
|
PublicCMS
|
2026-10-13T16:53:12.086Z |
2026-10-16T22:16:59.627Z |
|
cve-2026-110106
|
2.3 (v4.0)
4.2 (v3.1)
|
RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unl…
|
dromara
|
RuoYi-Vue-Plus
|
2026-10-13T16:53:08.493Z |
2026-10-16T22:15:43.994Z |
|
cve-2026-110101
|
5.1 (v4.0)
5.4 (v3.1)
|
Koillection through 1.8.4 Stored XSS via Datum File At…
|
benjaminjonard
|
Koillection
|
2026-10-13T16:53:05.007Z |
2026-10-16T22:12:14.462Z |
|
cve-2026-104126
|
|
JumpServer: Ansible Automation Template Rendering Allo…
|
jumpserver
|
jumpserver
|
2026-10-13T16:36:23.801Z |
2026-10-16T22:11:06.927Z |
|
cve-2026-55562
|
|
Cronicle: Stored XSS in admin Activity Log via account…
|
jhuckaby
|
Cronicle
|
2026-10-13T16:18:55.780Z |
2026-10-16T22:10:09.702Z |
|
cve-2026-109607
|
|
SourceCodester Online Exam System Login Endpoint login…
|
SourceCodester
|
Online Exam System
|
2026-10-13T16:15:21.078Z |
2026-10-16T22:09:07.051Z |
|
cve-2026-85990
|
|
Leantime: Any Authenticated User Can Self-Escalate to …
|
Leantime
|
leantime
|
2026-10-13T16:15:09.529Z |
2026-10-16T22:08:17.288Z |
|
cve-2026-32316
|
|
jq: Integer overflow in jvp_string_append() allows Hea…
|
jqlang
|
jq
|
2026-04-13T17:49:34.095Z |
2026-10-16T22:06:40.448Z |
|
cve-2026-54700
|
|
ConnectBot SSH: Unbounded SSH field lengths can cause …
|
connectbot
|
cbssh
|
2026-10-13T15:53:47.361Z |
2026-10-16T22:06:09.220Z |
|
cve-2026-49264
|
|
OAuthLib: Unsafe JSONP callback injection in Revocatio…
|
oauthlib
|
oauthlib
|
2026-10-13T15:48:40.102Z |
2026-10-16T22:04:46.619Z |
|
cve-2026-102981
|
|
Plane: Unauthenticated Workspace Invitation Token Leakage
|
makeplane
|
plane
|
2026-10-13T15:34:25.761Z |
2026-10-16T22:03:39.209Z |