|
cve-2026-48977
|
|
OpenSlide: Arbitrary memory write with crafted Ventana…
|
openslide
|
openslide
|
2026-09-17T20:26:21.921Z |
2026-09-18T20:07:13.789Z |
|
cve-2026-54355
|
|
MapServer: Reflected XSS in OpenLayers HTML Output via…
|
MapServer
|
MapServer
|
2026-09-17T20:24:32.522Z |
2026-09-24T20:45:56.071Z |
|
cve-2026-68523
|
|
Fulgur: Unbounded page slicing from attacker-controlle…
|
fulgur-rs
|
fulgur
|
2026-09-17T20:23:23.616Z |
2026-09-21T21:16:02.110Z |
|
cve-2026-54354
|
|
MapServer: PostGIS Numeric Filter Value SQL Injection …
|
MapServer
|
MapServer
|
2026-09-17T20:22:57.842Z |
2026-09-18T14:43:41.551Z |
|
cve-2026-76154
|
|
CVE-2026-76154 CVE Record
|
Grafana
|
Grafana OSS
|
2026-09-17T20:22:55.718Z |
2026-10-14T10:12:30.371Z |
|
cve-2026-54339
|
|
Glean: Server-Side Request Forgery (SSRF) with Full Re…
|
LeslieLeung
|
glean
|
2026-09-17T20:21:45.147Z |
2026-09-21T21:14:53.214Z |
|
cve-2026-67071
|
6.5 (v3.1)
|
HCL DevOps Deploy / HCL Launch is susceptible to an Im…
|
HCLSoftware
|
HCL DevOps Deploy / HCL Launch
|
2026-09-17T20:21:26.394Z |
2026-09-18T20:07:37.150Z |
|
cve-2026-54510
|
|
Speakr: CSRF bypass via unauthenticated API token para…
|
murtaza-nasir
|
speakr
|
2026-09-17T20:20:29.308Z |
2026-09-18T13:31:09.004Z |
|
cve-2026-54565
|
|
rhwp browser extension performs SSRF / private-network…
|
edwardkim
|
rhwp
|
2026-09-17T20:19:10.133Z |
2026-09-21T21:13:40.752Z |
|
cve-2026-68537
|
|
Fulgur: Unbounded page slicing from attacker-controlle…
|
fulgur-rs
|
fulgur
|
2026-09-17T20:18:59.957Z |
2026-09-17T20:23:12.488Z |
|
cve-2026-54521
|
|
FairEmail: Cross-site scripting (XSS) in AMP message r…
|
M66B
|
FairEmail
|
2026-09-17T20:17:47.341Z |
2026-09-18T20:08:14.389Z |
|
cve-2026-50277
|
|
dd-trace-cpp: Improper parsing of W3C baggage headers …
|
DataDog
|
dd-trace-cpp
|
2026-09-17T20:16:37.230Z |
2026-09-21T21:12:32.522Z |
|
cve-2026-54501
|
|
Browsertrix: Arbitrary Command Injection due to Improp…
|
webrecorder
|
browsertrix
|
2026-09-17T20:15:14.173Z |
2026-09-17T20:23:40.136Z |
|
cve-2026-54237
|
|
Wavelog: Unauthenticated Remote Code Execution
|
wavelog
|
wavelog
|
2026-09-17T20:14:10.057Z |
2026-09-18T18:32:56.635Z |
|
cve-2026-45140
|
|
Chamilo LMS CStudio upload flow allows unauthenticated…
|
chamilo
|
chamilo-lms
|
2026-09-17T20:11:52.462Z |
2026-09-18T18:33:07.092Z |
|
cve-2026-45143
|
|
Chamilo LMS: Student-to-admin stored XSS in private me…
|
chamilo
|
chamilo-lms
|
2026-09-17T20:09:57.972Z |
2026-09-24T20:55:23.244Z |
|
cve-2026-54460
|
|
OpenReception: Unauthenticated WebAuthn passkey inject…
|
open-reception
|
appointment-booking-software
|
2026-09-17T20:07:24.631Z |
2026-09-24T20:44:53.870Z |
|
cve-2026-50022
|
|
Metacat acts as unintended proxy to backend Apache SOL…
|
NCEAS
|
metacat
|
2026-09-17T20:06:28.258Z |
2026-09-17T20:24:14.545Z |
|
cve-2026-50275
|
|
Datadog PHP Tracer: Improper parsing of W3C baggage he…
|
DataDog
|
dd-trace-php
|
2026-09-17T20:04:26.605Z |
2026-09-18T20:08:45.062Z |
|
cve-2026-54918
|
|
NetBox Device Type Library: PR-controllable upstream c…
|
netbox-community
|
devicetype-library
|
2026-09-17T20:03:08.928Z |
2026-09-24T20:55:23.117Z |
|
cve-2026-54916
|
|
NetBox Device Type Library: Module Shadowing Bypass of…
|
netbox-community
|
devicetype-library
|
2026-09-17T20:01:14.294Z |
2026-09-18T18:33:16.921Z |
|
cve-2026-54752
|
|
NetBox Device Type Library: Insecure Pickle Deserializ…
|
netbox-community
|
devicetype-library
|
2026-09-17T19:56:16.136Z |
2026-09-21T21:11:24.708Z |
|
cve-2026-50125
|
|
MKP: Unbounded Pod Log Read via Attacker-Controlled `l…
|
StacklokLabs
|
mkp
|
2026-09-17T19:52:37.550Z |
2026-09-24T20:41:39.599Z |
|
cve-2026-54594
|
|
OmniBlocks: Spamming in Discussions tab possible via d…
|
OmniBlocks
|
monorepo
|
2026-09-17T19:51:32.309Z |
2026-09-18T20:09:27.955Z |
|
cve-2026-50285
|
|
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zst…
|
pomerium
|
pomerium
|
2026-09-17T19:49:20.917Z |
2026-09-17T20:19:48.967Z |
|
cve-2026-54692
|
|
SAIL: XBM X10 decoder writes 2 bytes per literal into …
|
HappySeaFox
|
sail
|
2026-09-17T19:47:57.832Z |
2026-09-21T21:10:23.470Z |
|
cve-2026-54627
|
|
SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bi…
|
HappySeaFox
|
sail
|
2026-09-17T19:47:14.090Z |
2026-09-18T20:10:15.233Z |
|
cve-2026-54626
|
|
SAIL: Heap out-of-bounds write in SAIL TGA decoder (in…
|
HappySeaFox
|
sail
|
2026-09-17T19:46:20.079Z |
2026-09-17T20:21:11.085Z |
|
cve-2026-54618
|
|
Obsidian Web MCP: Unauthenticated vault access: /oauth…
|
jimprosser
|
obsidian-web-mcp
|
2026-09-17T19:45:15.384Z |
2026-09-24T20:40:37.956Z |
|
cve-2026-54495
|
|
Cross-namespace FeatureFlagSource and InProcessConfigu…
|
open-feature
|
open-feature-operator
|
2026-09-17T19:44:13.222Z |
2026-09-18T14:43:51.856Z |