|
cve-2026-109526
|
|
HBAI-Ltd Toonflow-app exportData Endpoint information …
|
HBAI-Ltd
|
Toonflow-app
|
2026-10-13T15:30:12.762Z |
2026-10-16T22:02:27.551Z |
|
cve-2026-55376
|
|
heym Python Tool Sandbox Escape
|
heymrun
|
heym
|
2026-10-13T15:12:49.604Z |
2026-10-16T22:00:50.339Z |
|
cve-2026-53709
|
|
MCP Context Forge: Hardcoded default JWT_SECRET_KEY sh…
|
IBM
|
mcp-context-forge
|
2026-10-13T14:32:12.137Z |
2026-10-16T21:59:50.970Z |
|
cve-2026-109522
|
|
girishsaraf Online-Appointment-Booking-System Admin CR…
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-13T14:30:19.644Z |
2026-10-16T21:58:59.476Z |
|
cve-2026-77361
|
|
obsidian-tc symlink path mismatch bypasses read ACL re…
|
The-40-Thieves
|
obsidian-tc
|
2026-10-13T14:00:39.982Z |
2026-10-16T21:58:14.281Z |
|
cve-2026-109967
|
8.7 (v4.0)
7.5 (v3.1)
|
yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference D…
|
marcopiovanello
|
yt-dlp-web-ui
|
2026-10-13T14:00:18.615Z |
2026-10-16T21:57:12.112Z |
|
cve-2026-109410
|
|
macrozheng mall mall-admin/mall-portal moneyInfo OmsOr…
|
macrozheng
|
mall
|
2026-10-13T13:30:18.653Z |
2026-10-16T21:56:30.740Z |
|
cve-2026-109962
|
5.3 (v4.0)
4.3 (v3.1)
|
Froxlor 0.10.0 before 2.3.14 Missing Authorization in …
|
froxlor
|
froxlor
|
2026-10-13T13:27:24.126Z |
2026-10-16T21:51:24.862Z |
|
cve-2026-109957
|
5.3 (v4.0)
4.3 (v3.1)
|
EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter
|
espocrm
|
espocrm
|
2026-10-13T13:27:20.821Z |
2026-10-16T21:50:27.085Z |
|
cve-2026-109952
|
6 (v4.0)
5.3 (v3.1)
|
FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrad…
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:17.758Z |
2026-10-16T21:49:38.610Z |
|
cve-2026-109947
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via …
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:14.425Z |
2026-10-16T21:48:39.582Z |
|
cve-2026-109942
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference v…
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:11.301Z |
2026-10-16T21:47:43.702Z |
|
cve-2026-109680
|
6 (v4.0)
5.3 (v3.1)
|
FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write …
|
FreeRDP
|
FreeRDP
|
2026-10-13T13:27:08.292Z |
2026-10-16T21:46:38.791Z |
|
cve-2026-109405
|
|
conductor-oss conductor KafkaPublishTask.java KafkaPub…
|
conductor-oss
|
conductor
|
2026-10-13T12:30:13.580Z |
2026-10-16T21:45:39.505Z |
|
cve-2026-109190
|
|
conductor-oss conductor API Tool Configuration ListApi…
|
conductor-oss
|
conductor
|
2026-10-13T11:30:18.246Z |
2026-10-16T21:43:52.794Z |
|
cve-2026-109156
|
|
SeldonIO MLServer environment_tarball env.py _extract_…
|
SeldonIO
|
MLServer
|
2026-10-13T10:30:17.244Z |
2026-10-16T21:43:17.749Z |
|
cve-2026-109149
|
|
beautifier js-beautify memory allocation
|
beautifier
|
js-beautify
|
2026-10-13T09:30:16.051Z |
2026-10-16T21:42:23.123Z |
|
cve-2026-85114
|
|
A vulnerability has been identified in .NET Clien…
|
Siemens
|
.NET Client Library for SIMATIC S7 Webserver API
|
2026-10-13T09:18:57.499Z |
2026-10-16T21:41:27.171Z |
|
cve-2026-109115
|
|
AdithyaYelloju Restaurant-Management-System Password R…
|
AdithyaYelloju
|
Restaurant-Management-System
|
2026-10-13T08:30:17.607Z |
2026-10-16T21:39:37.598Z |
|
cve-2026-109108
|
|
Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command i…
|
Wavlink
|
WL-WN530BE1-A
|
2026-10-13T07:30:21.992Z |
2026-10-16T21:38:50.808Z |
|
cve-2026-108974
|
|
SourceCodester E-Learning System Users.php save_users …
|
SourceCodester
|
E-Learning System
|
2026-10-13T06:30:11.492Z |
2026-10-16T21:37:55.165Z |
|
cve-2026-108970
|
|
itsmeravitejak Online-Examination-System Registration …
|
itsmeravitejak
|
Online-Examination-System
|
2026-10-13T05:30:14.172Z |
2026-10-16T21:37:14.373Z |
|
cve-2026-108966
|
|
SourceCodester Performance Indicator System product.ph…
|
SourceCodester
|
Performance Indicator System
|
2026-10-13T04:15:11.052Z |
2026-10-16T21:36:27.745Z |
|
cve-2026-102692
|
|
RIOT: Potential integer overflow in nanocoap Block2 ha…
|
RIOT-OS
|
RIOT
|
2026-10-16T16:48:35.776Z |
2026-10-16T21:20:02.887Z |
|
cve-2026-111606
|
8.6 (v4.0)
8.1 (v3.1)
|
Huly Platform through 0.7.432 Account Takeover via mer…
|
hcengineering
|
Huly Platform
|
2026-10-16T17:38:47.643Z |
2026-10-16T21:19:52.033Z |
|
cve-2026-111611
|
5.3 (v4.0)
5.4 (v3.1)
|
roncoo-education through 25.0.0-RELEASE IDOR via Order…
|
roncoo
|
roncoo-education
|
2026-10-16T17:38:51.139Z |
2026-10-16T21:19:45.346Z |
|
cve-2026-111616
|
6.9 (v4.0)
4.9 (v3.1)
|
Oqtane Framework through 10.2.6 Cross-Site Settings Di…
|
Oqtane
|
Oqtane Framework
|
2026-10-16T17:38:54.615Z |
2026-10-16T21:19:35.462Z |
|
cve-2026-111621
|
5.3 (v4.0)
4.3 (v3.1)
|
TDuck Survey Form through 5.3 Missing Authorization vi…
|
TDuckCloud
|
tduck-survey-form
|
2026-10-16T17:38:58.051Z |
2026-10-16T21:19:28.058Z |
|
cve-2026-111626
|
9.3 (v4.0)
9.8 (v3.1)
|
Webreaper Damselfly through 4.5.3 Missing Authenticati…
|
Webreaper
|
Damselfly
|
2026-10-16T17:39:01.458Z |
2026-10-16T21:19:19.069Z |
|
cve-2026-111631
|
5.3 (v4.0)
5.4 (v3.1)
|
Distributor before 2.3.2 Missing Authorization in Exte…
|
10up
|
Distributor
|
2026-10-16T17:39:04.861Z |
2026-10-16T21:19:10.473Z |