|
cve-2026-54646
|
|
CubeCart: SQL Identifier Injection via Backtick Bypass…
|
cubecart
|
v6
|
2026-09-17T22:01:53.897Z |
2026-09-18T18:32:29.629Z |
|
cve-2026-54648
|
|
CubeCart: Missing Authorization Check in customers.gdp…
|
cubecart
|
v6
|
2026-09-17T22:01:04.521Z |
2026-09-18T13:08:09.649Z |
|
cve-2026-54734
|
|
Prebid Server Java: Vulnerability to request forgery a…
|
prebid
|
prebid-server-java
|
2026-09-17T21:59:45.873Z |
2026-09-18T20:03:23.515Z |
|
cve-2026-54519
|
|
AI Agent Automation: Missing ownership checks in memor…
|
vmDeshpande
|
ai-agent-automation
|
2026-09-17T21:58:41.375Z |
2026-09-22T01:56:49.730Z |
|
cve-2026-86688
|
7.4 (v4.0)
|
Session id is not renewed on authentication in ash_aut…
|
team-alembic
|
ash_authentication
|
2026-09-17T21:58:00.853Z |
2026-09-18T14:31:41.961Z |
|
cve-2026-76949
|
9.1 (v4.0)
|
Remember-me sign-in guard reads a session key that is …
|
team-alembic
|
ash_authentication
|
2026-09-17T21:57:50.146Z |
2026-09-18T14:31:41.806Z |
|
cve-2026-54520
|
|
AI Agent Automation: Workflow file step path traversal…
|
vmDeshpande
|
ai-agent-automation
|
2026-09-17T21:57:39.051Z |
2026-09-18T18:32:38.051Z |
|
cve-2026-54767
|
|
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destr…
|
LabRedesCefetRJ
|
WeGIA
|
2026-09-17T21:56:28.590Z |
2026-09-18T20:04:14.441Z |
|
cve-2026-54671
|
|
WeGIA: Authorization Bypass via Empty Resource Array i…
|
LabRedesCefetRJ
|
WeGIA
|
2026-09-17T21:55:39.003Z |
2026-09-18T13:09:54.841Z |
|
cve-2026-54670
|
|
WeGIA: Unauthenticated Auth Bypass + Local File Inclusion
|
LabRedesCefetRJ
|
WeGIA
|
2026-09-17T21:54:43.078Z |
2026-09-23T19:11:47.212Z |
|
cve-2026-54634
|
|
Hamlib: rigctld `send_raw` Stack Out-of-Bounds Write a…
|
Hamlib
|
Hamlib
|
2026-09-17T21:52:51.132Z |
2026-09-18T14:43:00.233Z |
|
cve-2026-54608
|
|
MythicalDash: Unauthenticated payment bypass in Stripe…
|
MythicalLTD
|
MythicalDash
|
2026-09-17T21:48:39.201Z |
2026-09-18T13:12:23.118Z |
|
cve-2026-54506
|
|
Vvveb: Stored XSS via sanitizeHTML() bypass in user pr…
|
givanz
|
Vvveb
|
2026-09-17T21:47:20.530Z |
2026-09-23T19:09:21.053Z |
|
cve-2026-54612
|
|
Vvveb: Authenticated editor path traversal to PHP file…
|
givanz
|
Vvveb
|
2026-09-17T21:46:27.346Z |
2026-09-18T20:04:55.345Z |
|
cve-2026-54613
|
|
Vvveb: Path Traversal in Revision Backup Reader/Delete…
|
givanz
|
Vvveb
|
2026-09-17T21:45:32.239Z |
2026-09-22T01:55:30.837Z |
|
cve-2026-93307
|
|
O-RAN-SC SMO OAM VES Collector memory allocation
|
O-RAN-SC
|
SMO OAM
|
2026-09-17T21:45:10.125Z |
2026-09-23T17:53:54.780Z |
|
cve-2026-54507
|
|
Vvveb oEmbedProxy vulnerable to server-side request forgery
|
givanz
|
Vvveb
|
2026-09-17T21:44:47.699Z |
2026-09-18T14:43:10.025Z |
|
cve-2026-50158
|
|
yutu: Arbitrary File Write via MCP `caption-download` Tool
|
eat-pray-ai
|
yutu
|
2026-09-17T21:43:49.806Z |
2026-09-18T14:43:19.020Z |
|
cve-2026-53534
|
|
JabRef CAYW Sublime Text integration permits operating…
|
JabRef
|
jabref
|
2026-09-17T21:42:47.446Z |
2026-09-24T20:55:23.379Z |
|
cve-2026-53557
|
|
SQLBot: Second-Order SQL Injection via Excel Datasourc…
|
dataease
|
SQLBot
|
2026-09-17T21:41:45.155Z |
2026-09-22T01:54:15.476Z |
|
cve-2026-53555
|
|
Stored XSS via SVG Upload
|
dataease
|
SQLBot
|
2026-09-17T21:40:48.271Z |
2026-09-18T13:14:53.154Z |
|
cve-2026-53556
|
|
SQLBot: Authenticated SQL Injection in previewData Res…
|
dataease
|
SQLBot
|
2026-09-17T21:39:44.056Z |
2026-09-18T20:01:34.847Z |
|
cve-2026-53554
|
|
SQLBot: Arbitrary File Write via parseExcel Leading to…
|
dataease
|
SQLBot
|
2026-09-17T21:38:37.353Z |
2026-09-18T13:16:54.601Z |
|
cve-2026-54633
|
|
PoDoFo: Heap Out-of-Bounds Read in Indexed Color Space…
|
podofo
|
podofo
|
2026-09-17T21:36:45.592Z |
2026-09-22T01:52:46.723Z |
|
cve-2026-54343
|
|
Frappe LMS: Path Traversal in SCORM File Serving
|
frappe
|
lms
|
2026-09-17T21:35:53.629Z |
2026-09-18T20:14:49.268Z |
|
cve-2026-50291
|
|
OpenImageIO: Segmentation Fault in BmpInput::read_nati…
|
AcademySoftwareFoundation
|
OpenImageIO
|
2026-09-17T21:33:44.377Z |
2026-09-24T20:48:06.366Z |
|
cve-2026-14311
|
|
Booking for Appointments and Events Calendar – Amelia …
|
melograno
|
Booking for Appointments and Events Calendar – Amelia
|
2026-09-17T21:28:49.384Z |
2026-09-18T14:31:41.652Z |
|
cve-2026-16582
|
|
Booking for Appointments and Events Calendar - Amelia …
|
melograno
|
Booking for Appointments and Events Calendar – Amelia
|
2026-09-17T21:28:49.022Z |
2026-09-18T14:43:25.774Z |
|
cve-2026-16750
|
|
Motors – Car Dealership & Classified Listings <= 1.4.1…
|
stylemix
|
Motors – Car Dealership & Classified Listings Plugin
|
2026-09-17T21:28:48.521Z |
2026-09-18T13:18:49.931Z |
|
cve-2026-93426
|
8.4 (v4.0)
8.5 (v3.1)
|
SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Que…
|
SigNoz
|
signoz
|
2026-09-17T21:19:12.144Z |
2026-09-18T20:05:37.112Z |