|
cve-2026-93432
|
6.1 (v3.1)
|
Io.quarkus.qute:quarkus-core: cross-site scripting (xs…
|
Red Hat
|
Red Hat Build of Apache Camel 3.33.4.redhat
|
2026-09-18T17:53:19.772Z |
2026-11-06T06:36:34.691Z |
|
cve-2026-93753
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected because it does not describe a security vulnerability.'}], 'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-11-02T16:33:19.357Z'}}
|
N/A
|
N/A
|
2026-09-18T17:51:37.794Z |
2026-11-02T16:33:19.357Z |
|
cve-2026-93752
|
8.7 (v4.0)
7.5 (v3.1)
|
CSSOM through 0.5.0 Denial of Service via length Property
|
NV
|
CSSOM
|
2026-09-18T17:51:37.079Z |
2026-09-24T14:23:11.127Z |
|
cve-2026-93751
|
6.9 (v4.0)
6.5 (v3.1)
|
uri-js through 4.4.1 Improper UTF-8 Decoding via pctDecChars
|
garycourt
|
uri-js
|
2026-09-18T17:51:36.332Z |
2026-09-24T14:23:10.183Z |
|
cve-2026-93750
|
8.2 (v4.0)
5.9 (v3.1)
|
http-cache-semantics through 4.2.0 Cross-Client Cache …
|
kornelski
|
http-cache-semantics
|
2026-09-18T17:51:35.687Z |
2026-09-24T14:23:09.209Z |
|
cve-2026-93749
|
8.7 (v4.0)
7.5 (v3.1)
|
source-map-js through 1.2.1 Event Loop Denial of Service
|
7rulnik
|
source-map-js
|
2026-09-18T17:51:34.972Z |
2026-09-24T14:23:08.247Z |
|
cve-2026-93748
|
8.7 (v4.0)
7.5 (v3.1)
|
http-cache-semantics through 4.2.0 Cross-User Cache Di…
|
kornelski
|
http-cache-semantics
|
2026-09-18T17:51:34.262Z |
2026-11-05T14:40:44.021Z |
|
cve-2026-81181
|
|
SysReptor: Session Fixation in Password-Protected Shar…
|
Syslifters
|
sysreptor
|
2026-09-18T17:48:53.253Z |
2026-09-21T20:48:45.089Z |
|
cve-2026-81182
|
|
SysReptor: Unauthorized file disclosure by broken acce…
|
Syslifters
|
sysreptor
|
2026-09-18T17:48:05.575Z |
2026-09-24T21:05:26.769Z |
|
cve-2026-81180
|
|
SysReptor: Authenticated RCE by insecure image processing
|
Syslifters
|
sysreptor
|
2026-09-18T17:47:02.134Z |
2026-09-22T15:15:32.405Z |
|
cve-2026-81179
|
|
SysReptor: Host header injection might allow account t…
|
Syslifters
|
sysreptor
|
2026-09-18T17:45:58.249Z |
2026-09-18T19:49:53.040Z |
|
cve-2026-81178
|
|
SysReptor: Anonymous note-share link discloses project…
|
Syslifters
|
sysreptor
|
2026-09-18T17:44:42.562Z |
2026-09-18T18:03:40.523Z |
|
cve-2026-71537
|
|
Paymenter: Credit-refund double-spend race condition i…
|
Paymenter
|
Paymenter
|
2026-09-18T17:43:02.740Z |
2026-09-24T21:05:26.640Z |
|
cve-2026-85058
|
|
Moquette: Missing Authorization in io.moquette:moquett…
|
moquette-io
|
moquette
|
2026-09-18T17:40:39.113Z |
2026-09-22T15:14:00.736Z |
|
cve-2026-63445
|
|
Perses: Unvalidated project parameter enables filesyst…
|
perses
|
perses
|
2026-09-18T17:38:02.870Z |
2026-09-18T18:04:16.733Z |
|
cve-2026-63199
|
|
Perses: Missing authorization in datasource proxy allo…
|
perses
|
perses
|
2026-09-18T17:36:05.256Z |
2026-09-24T21:05:26.515Z |
|
cve-2026-63458
|
|
Perses project query parameter authorization bypass ex…
|
perses
|
perses
|
2026-09-18T17:32:54.847Z |
2026-09-18T19:50:33.901Z |
|
cve-2026-32641
|
|
Parseable: Unauthenticated Denial of Service via panic…
|
parseablehq
|
parseable
|
2026-09-18T17:32:02.658Z |
2026-09-21T20:48:52.314Z |
|
cve-2026-93759
|
8.8 (v4.0)
8.6 (v3.1)
|
Server-side JavaScript injection via string query crit…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:27:51.644Z |
2026-09-21T18:15:19.296Z |
|
cve-2026-69184
|
|
c-ares: CPU-exhaustion denial of service via unbounded…
|
c-ares
|
c-ares
|
2026-09-18T17:26:52.210Z |
2026-09-21T20:48:59.663Z |
|
cve-2026-69186
|
|
c-ares: Memory-amplification denial of service via unv…
|
c-ares
|
c-ares
|
2026-09-18T17:25:42.440Z |
2026-09-18T19:51:33.881Z |
|
cve-2026-61552
|
|
Icinga 2 DSL Injection via Unescaped Import Template Name
|
Icinga
|
icinga2
|
2026-09-18T17:24:42.394Z |
2026-09-18T18:05:44.787Z |
|
cve-2026-93760
|
8.3 (v4.0)
8.2 (v3.1)
|
NoSQL injection of JavaScript-executing query operator…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:24:03.549Z |
2026-09-21T18:14:42.500Z |
|
cve-2026-61551
|
|
Icinga 2: Stack overflow via deeply nested JSON objects
|
Icinga
|
icinga2
|
2026-09-18T17:23:11.822Z |
2026-09-24T21:05:26.385Z |
|
cve-2026-61550
|
|
Icinga 2: Improper access control for JSON-RPC update …
|
Icinga
|
icinga2
|
2026-09-18T17:21:18.217Z |
2026-09-21T20:49:08.713Z |
|
cve-2026-93761
|
8.7 (v4.0)
7.5 (v3.1)
|
Denial of service via unbounded regex matching in Mong…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:20:34.623Z |
2026-09-19T14:11:43.253Z |
|
cve-2026-91127
|
|
File Viewer: DOM XSS via unsafe hyperlink schemes in t…
|
flyfish-dev
|
file-viewer
|
2026-09-18T17:18:40.370Z |
2026-09-22T15:10:24.440Z |
|
cve-2026-77386
|
|
Kyoo: OIDC login token can be redirected to an attacke…
|
zoriya
|
Kyoo
|
2026-09-18T17:16:37.282Z |
2026-09-22T15:09:09.067Z |
|
cve-2026-77385
|
|
Kyoo: Transcoder serves uncataloged files from the med…
|
zoriya
|
Kyoo
|
2026-09-18T17:15:28.745Z |
2026-09-18T19:52:50.924Z |
|
cve-2026-93762
|
9.2 (v4.0)
9.8 (v3.1)
|
Data deletion and attribute disclosure via field-name …
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:15:17.490Z |
2026-09-21T18:18:05.713Z |