|
cve-2026-33625
|
|
LMDeploy vulnerable to arbitrary code execution via ev…
|
InternLM
|
lmdeploy
|
2026-09-18T17:13:37.133Z |
2026-09-22T15:08:07.065Z |
|
cve-2026-62278
|
|
LubeLogger: Path Traversal in HandleTranslationFileUpl…
|
hargata
|
lubelog
|
2026-09-18T17:13:31.411Z |
2026-09-21T20:49:14.922Z |
|
cve-2026-62279
|
|
LubeLogger: IDOR in DuplicateRecordsToOtherVehicles Al…
|
hargata
|
lubelog
|
2026-09-18T17:11:31.149Z |
2026-09-24T21:05:26.252Z |
|
cve-2026-93763
|
7.1 (v4.0)
6.5 (v3.1)
|
Silent plaintext persistence via unresolved callable d…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:10:24.616Z |
2026-09-21T18:16:01.990Z |
|
cve-2026-84992
|
|
md-editor-v3: XSS via fenced-code language rendering bypass
|
imzbf
|
md-editor-v3
|
2026-09-18T17:10:08.497Z |
2026-09-18T18:06:19.593Z |
|
cve-2026-84975
|
|
PJSIP: TLS server identity (hostname) verification byp…
|
pjsip
|
pjproject
|
2026-09-18T17:08:33.140Z |
2026-09-24T21:05:26.112Z |
|
cve-2026-77396
|
|
PJSIP: Heap buffer overflow in the AVI parser
|
pjsip
|
pjproject
|
2026-09-18T17:07:50.209Z |
2026-09-21T20:49:26.187Z |
|
cve-2026-93764
|
7.1 (v4.0)
6.5 (v3.1)
|
Plaintext storage of encrypted fields via skipped embe…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:06:27.349Z |
2026-09-21T18:47:43.304Z |
|
cve-2026-92701
|
|
Cocos AI: Intra-handshake attested TLS implementation …
|
ultravioletrs
|
cocos
|
2026-09-18T17:06:18.173Z |
2026-10-13T20:08:36.625Z |
|
cve-2026-64847
|
|
AnyIO process-pool workers can block indefinitely on u…
|
agronholm
|
anyio
|
2026-09-18T17:04:32.038Z |
2026-09-18T18:07:27.772Z |
|
cve-2025-66455
|
|
LMDeploy has Remote Code Execution by Pickle Deseriali…
|
InternLM
|
lmdeploy
|
2026-09-18T17:03:37.084Z |
2026-09-18T19:54:19.941Z |
|
cve-2026-92702
|
|
Cocos AI: Intra-handshake attested TLS implementation …
|
ultravioletrs
|
cocos
|
2026-09-18T17:02:48.370Z |
2026-10-13T20:08:52.222Z |
|
cve-2026-63349
|
|
AnyIO run_process/open_process ignores extra_groups an…
|
agronholm
|
anyio
|
2026-09-18T17:02:30.273Z |
2026-09-24T21:05:25.977Z |
|
cve-2026-93765
|
8.3 (v4.0)
9.1 (v3.1)
|
Document deletion and process crash via unvalidated me…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T17:01:09.031Z |
2026-09-21T18:47:20.835Z |
|
cve-2026-77616
|
|
Semantic MediaWiki affected by reflected XSS in `Speci…
|
SemanticMediaWiki
|
SemanticMediaWiki
|
2026-09-18T16:58:47.062Z |
2026-09-18T17:22:50.475Z |
|
cve-2026-93758
|
8.6 (v4.0)
8.1 (v3.1)
|
Cross-principal document update, theft, and deletion v…
|
MongoDB Inc.
|
Mongoid
|
2026-09-18T16:56:41.325Z |
2026-09-21T18:46:56.818Z |
|
cve-2026-61833
|
|
zot: Bearer authentication maps DELETE to push scope, …
|
project-zot
|
zot
|
2026-09-18T16:55:22.002Z |
2026-09-23T19:06:14.333Z |
|
cve-2026-77610
|
|
Semantic MediaWiki has a query debug output XSS (`Debu…
|
SemanticMediaWiki
|
SemanticMediaWiki
|
2026-09-18T16:55:01.848Z |
2026-09-21T20:49:32.926Z |
|
cve-2026-61548
|
|
Rsyslog: mmpstrucdata stack buffer overflow with overs…
|
rsyslog
|
rsyslog
|
2026-09-18T16:54:28.925Z |
2026-09-21T20:49:39.195Z |
|
cve-2026-55556
|
|
Rsyslog: Heap buffer overflow in imhttp plugin Basic A…
|
rsyslog
|
rsyslog
|
2026-09-18T16:53:29.184Z |
2026-09-22T15:04:35.228Z |
|
cve-2026-77609
|
|
Semantic MediaWiki has an open redirect in Special:URI…
|
SemanticMediaWiki
|
SemanticMediaWiki
|
2026-09-18T16:52:16.291Z |
2026-09-22T15:01:26.331Z |
|
cve-2026-63406
|
|
AnyCable: Telemetry Subsystem Contains Hardcoded Authe…
|
anycable
|
anycable
|
2026-09-18T16:51:54.242Z |
2026-09-18T17:02:47.780Z |
|
cve-2026-77607
|
|
Semantic MediaWiki affected by Special:Ask table `sep`…
|
SemanticMediaWiki
|
SemanticMediaWiki
|
2026-09-18T16:51:10.125Z |
2026-09-18T19:55:00.589Z |
|
cve-2026-63405
|
|
AnyCable: Pusher REST API Does Not Verify Request Body…
|
anycable
|
anycable
|
2026-09-18T16:47:37.120Z |
2026-09-18T17:07:38.720Z |
|
cve-2026-46655
|
|
virtio-win: Integer overflow causing a heap overflow i…
|
virtio-win
|
kvm-guest-drivers-windows
|
2026-09-18T16:46:34.832Z |
2026-09-23T19:15:05.093Z |
|
cve-2026-77239
|
|
WACRM: Service-role routes missing a role check
|
ArnasDon
|
wacrm
|
2026-09-18T16:45:27.574Z |
2026-09-18T19:56:33.123Z |
|
cve-2026-93559
|
|
Forget-C Jellyfish AI Short Drama Studio FastAPI depen…
|
Forget-C
|
Jellyfish AI Short Drama Studio
|
2026-09-18T16:45:08.948Z |
2026-09-22T15:00:38.554Z |
|
cve-2026-91142
|
3.6 (v3.1)
|
Cockpit: cockpit: unauthorized modification of login r…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-18T16:44:09.465Z |
2026-11-06T19:56:13.106Z |
|
cve-2026-91147
|
5.9 (v3.1)
|
Cockpit: cockpit: denial of service in `cockpit-ws` du…
|
Red Hat
|
Red Hat Enterprise Linux 8
|
2026-09-18T16:43:51.546Z |
2026-11-06T01:44:51.477Z |
|
cve-2026-91149
|
7.5 (v3.1)
|
Cockpit: cockpit: denial of service via unbounded conn…
|
Red Hat
|
Red Hat Enterprise Linux 9
|
2026-09-18T16:43:46.021Z |
2026-11-05T00:04:35.837Z |