Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-93854 7.2 (v4.0) In OpenStack Blazar before 17.0.1, the V2 lease A… OpenStack
Blazar
2026-09-18T18:57:56.107Z 2026-09-22T15:19:34.210Z
cve-2026-75894 N/A Reachable assertion at ranap_handle_co_dt() Osmocom
osmo-iuh
2026-09-18T18:52:55.206Z 2026-09-21T18:26:10.848Z
cve-2026-93852 7.1 (v4.0) In OpenStack Blazar before 17.0.1, the V2 lease l… OpenStack
Blazar
2026-09-18T18:48:34.899Z 2026-09-18T19:47:14.422Z
cve-2026-75893 N/A Heap based buffer overflow at ipaccess_proxy_read_msg() Osmocom
osmo-bsc
2026-09-18T18:40:26.578Z 2026-09-21T18:16:09.346Z
cve-2026-75892 N/A Out of bounds write in PDP ctx GSN-Address decode Osmocom
osmo-ggsn
2026-09-18T18:30:31.298Z 2026-09-21T18:18:18.391Z
cve-2026-93650 Saleor throttling.py get_client_ip excessive authentication n/a
Saleor
2026-09-18T18:15:10.080Z 2026-09-18T19:47:52.282Z
cve-2026-59163 Mnemosyne has JWT signature verification bypass sync s… AxDSan
mnemosyne
2026-09-18T17:57:50.265Z 2026-09-18T18:01:56.013Z
cve-2026-92768 5.5 (v3.1) Cockpit-machines: cockpit-machines: sensitive data exp… Red Hat
Red Hat Enterprise Linux 10
2026-09-18T17:53:54.833Z 2026-10-21T13:31:44.314Z
cve-2026-92747 5 (v3.1) Cockpit-machines: cockpit-machines: sensitive data exp… Red Hat
Red Hat Enterprise Linux 10
2026-09-18T17:53:35.109Z 2026-10-21T13:31:31.663Z
cve-2026-92745 5 (v3.1) Cockpit-machines: cockpit-machines: information disclo… Red Hat
Red Hat Enterprise Linux 10
2026-09-18T17:53:29.077Z 2026-10-21T13:31:31.677Z
cve-2026-93432 6.1 (v3.1) Io.quarkus.qute:quarkus-core: cross-site scripting (xs… Red Hat
Red Hat Build of Apache Camel 3.33.4.redhat
2026-09-18T17:53:19.772Z 2026-11-06T06:36:34.691Z
cve-2026-93753 N/A {'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected because it does not describe a security vulnerability.'}], 'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-11-02T16:33:19.357Z'}} N/A N/A 2026-09-18T17:51:37.794Z 2026-11-02T16:33:19.357Z
cve-2026-93752 8.7 (v4.0) 7.5 (v3.1) CSSOM through 0.5.0 Denial of Service via length Property NV
CSSOM
2026-09-18T17:51:37.079Z 2026-09-24T14:23:11.127Z
cve-2026-93751 6.9 (v4.0) 6.5 (v3.1) uri-js through 4.4.1 Improper UTF-8 Decoding via pctDecChars garycourt
uri-js
2026-09-18T17:51:36.332Z 2026-09-24T14:23:10.183Z
cve-2026-93750 8.2 (v4.0) 5.9 (v3.1) http-cache-semantics through 4.2.0 Cross-Client Cache … kornelski
http-cache-semantics
2026-09-18T17:51:35.687Z 2026-09-24T14:23:09.209Z
cve-2026-93749 8.7 (v4.0) 7.5 (v3.1) source-map-js through 1.2.1 Event Loop Denial of Service 7rulnik
source-map-js
2026-09-18T17:51:34.972Z 2026-09-24T14:23:08.247Z
cve-2026-93748 8.7 (v4.0) 7.5 (v3.1) http-cache-semantics through 4.2.0 Cross-User Cache Di… kornelski
http-cache-semantics
2026-09-18T17:51:34.262Z 2026-11-05T14:40:44.021Z
cve-2026-81181 SysReptor: Session Fixation in Password-Protected Shar… Syslifters
sysreptor
2026-09-18T17:48:53.253Z 2026-09-21T20:48:45.089Z
cve-2026-81182 SysReptor: Unauthorized file disclosure by broken acce… Syslifters
sysreptor
2026-09-18T17:48:05.575Z 2026-09-24T21:05:26.769Z
cve-2026-81180 SysReptor: Authenticated RCE by insecure image processing Syslifters
sysreptor
2026-09-18T17:47:02.134Z 2026-09-22T15:15:32.405Z
cve-2026-81179 SysReptor: Host header injection might allow account t… Syslifters
sysreptor
2026-09-18T17:45:58.249Z 2026-09-18T19:49:53.040Z
cve-2026-81178 SysReptor: Anonymous note-share link discloses project… Syslifters
sysreptor
2026-09-18T17:44:42.562Z 2026-09-18T18:03:40.523Z
cve-2026-71537 Paymenter: Credit-refund double-spend race condition i… Paymenter
Paymenter
2026-09-18T17:43:02.740Z 2026-09-24T21:05:26.640Z
cve-2026-85058 Moquette: Missing Authorization in io.moquette:moquett… moquette-io
moquette
2026-09-18T17:40:39.113Z 2026-09-22T15:14:00.736Z
cve-2026-63445 Perses: Unvalidated project parameter enables filesyst… perses
perses
2026-09-18T17:38:02.870Z 2026-09-18T18:04:16.733Z
cve-2026-63199 Perses: Missing authorization in datasource proxy allo… perses
perses
2026-09-18T17:36:05.256Z 2026-09-24T21:05:26.515Z
cve-2026-63458 Perses project query parameter authorization bypass ex… perses
perses
2026-09-18T17:32:54.847Z 2026-09-18T19:50:33.901Z
cve-2026-32641 Parseable: Unauthenticated Denial of Service via panic… parseablehq
parseable
2026-09-18T17:32:02.658Z 2026-09-21T20:48:52.314Z
cve-2026-93759 8.8 (v4.0) 8.6 (v3.1) Server-side JavaScript injection via string query crit… MongoDB Inc.
Mongoid
2026-09-18T17:27:51.644Z 2026-09-21T18:15:19.296Z
cve-2026-69184 c-ares: CPU-exhaustion denial of service via unbounded… c-ares
c-ares
2026-09-18T17:26:52.210Z 2026-09-21T20:48:59.663Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description