|
cve-2026-108492
|
5.3 (v3.1)
|
WordPress Quick Paypal Payments plugin <= 6.0.3 - Brok…
|
Fullworks Plugins
|
Quick Paypal Payments
|
2026-10-13T08:29:26.631Z |
2026-10-19T08:14:59.464Z |
|
cve-2026-111409
|
5.3 (v3.1)
|
WordPress YITH PayPal Express Checkout for WooCommerce…
|
YITH
|
YITH PayPal Express Checkout for WooCommerce
|
2026-10-16T12:52:57.180Z |
2026-10-19T08:14:29.318Z |
|
cve-2026-47790
|
6.3 (v4.0)
|
Privilege Escalation via QuFTP Log-based XSS
|
QNAP Systems Inc.
|
QuFTP Service
|
2026-10-15T09:38:20.936Z |
2026-10-19T08:06:24.726Z |
|
cve-2026-107863
|
5.3 (v3.1)
|
WordPress Products Restricted Users for WooCommerce pl…
|
Codection
|
Products Restricted Users for WooCommerce
|
2026-10-12T08:24:45.942Z |
2026-10-19T07:34:27.782Z |
|
cve-2026-57727
|
7.5 (v3.1)
|
WordPress Kirki plugin <= 6.2.0 - Broken Access Contro…
|
Themeum
|
Kirki
|
2026-07-13T08:41:24.850Z |
2026-10-19T06:43:16.157Z |
|
cve-2026-41544
|
8.7 (v4.0)
|
Path Traversal leading to Arbitrary File Move, Docker …
|
QNAP Systems Inc.
|
QcalAgent
|
2026-10-15T07:00:14.196Z |
2026-10-19T02:05:29.256Z |
|
cve-2026-41539
|
6.3 (v4.0)
|
QTS, QuTS hero
|
QNAP Systems Inc.
|
QTS
|
2026-06-09T05:51:37.054Z |
2026-10-19T02:05:08.428Z |
|
cve-2026-108519
|
N/A
|
{'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-18T22:19:26.180Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}
|
N/A
|
N/A
|
|
2026-10-18T22:19:26.180Z |
|
cve-2026-33555
|
|
An issue was discovered in HAProxy before 3.3.6. …
|
HAProxy
|
HAProxy
|
2026-04-13T00:00:00.000Z |
2026-10-18T20:07:07.236Z |
|
cve-2026-84790
|
7.6 (v4.0)
|
OpenVPN 2.7_alpha1 through 2.7.7 allows remote au…
|
OpenVPN
|
OpenVPN
|
2026-10-13T21:39:05.221Z |
2026-10-18T13:54:09.591Z |
|
cve-2026-86573
|
5.1 (v3.1)
|
Out-of-bounds Write Vulnerability in Hitachi Disk Arra…
|
Hitachi
|
Hitachi Disk Array Driver for AIX
|
2026-10-14T01:46:58.245Z |
2026-10-18T13:54:09.447Z |
|
cve-2026-82715
|
7.9 (v3.1)
|
Insecure Temporary File Vulnerability in Hitachi Disk …
|
Hitachi
|
Hitachi Disk Array Driver for AIX
|
2026-10-14T01:46:59.198Z |
2026-10-18T13:54:09.288Z |
|
cve-2026-14765
|
7.7 (v3.1)
|
Epic Games Unreal Engine Insecure Default URL Scheme A…
|
Epic Games
|
Unreal Engine
|
2026-10-14T02:31:08.607Z |
2026-10-18T13:54:09.144Z |
|
cve-2026-76113
|
4.3 (v3.1)
|
Dell Terraform Provider for Redfish, versions 1.1…
|
Dell
|
Terraform Provider for Redfish
|
2026-10-14T15:04:43.908Z |
2026-10-18T13:54:08.999Z |
|
cve-2026-101940
|
7.5 (v3.1)
8.7 (v4.0)
|
Junos OS and Junos OS Evolved: An attacker causes a ro…
|
Juniper Networks
|
Junos OS
|
2026-10-14T16:41:35.328Z |
2026-10-18T13:54:08.858Z |
|
cve-2026-101941
|
7.5 (v3.1)
8.7 (v4.0)
|
Junos OS and Junos OS Evolved: An attacker causes an r…
|
Juniper Networks
|
Junos OS
|
2026-10-14T16:41:47.756Z |
2026-10-18T13:54:08.705Z |
|
cve-2026-101942
|
7.5 (v3.1)
8.7 (v4.0)
|
Junos OS and Junos OS Evolved: An attacker causes rpd …
|
Juniper Networks
|
Junos OS
|
2026-10-14T16:42:01.425Z |
2026-10-18T13:54:08.555Z |
|
cve-2026-101943
|
7.5 (v3.1)
8.7 (v4.0)
|
Junos OS and Junos OS Evolved: An attacker causes rpd …
|
Juniper Networks
|
Junos OS
|
2026-10-14T16:42:15.164Z |
2026-10-18T13:54:08.400Z |
|
cve-2026-18516
|
9.6 (v3.1)
|
Improper Encoding or Escaping of Output in Crafty Controller
|
Arcadia Technology, LLC
|
Crafty Controller
|
2026-10-16T13:37:55.079Z |
2026-10-18T13:54:08.252Z |
|
cve-2026-96424
|
7.8 (v3.1)
|
Incorrect Permission Assignment for Critical Resource …
|
UBports
|
lomiri-download-manager
|
2026-10-16T15:35:17.561Z |
2026-10-18T13:54:08.107Z |
|
cve-2026-96425
|
5.5 (v3.1)
|
Incorrect Permission Assignment for Critical Resource …
|
UBports
|
lomiri-download-manager
|
2026-10-16T15:35:22.447Z |
2026-10-18T13:54:07.958Z |
|
cve-2026-78231
|
N/A
|
Gitea blind SSRF through OpenID assertion verification
|
Gitea
|
Gitea
|
2026-10-14T14:38:10.532Z |
2026-10-18T13:43:09.650Z |
|
cve-2026-73814
|
N/A
|
Gitea repository ownership escalation by administrators
|
Gitea
|
Gitea
|
2026-10-14T14:38:05.476Z |
2026-10-18T13:41:38.796Z |
|
cve-2026-73804
|
N/A
|
Gitea API token scope escalation through HTTP signatures
|
Gitea
|
Gitea
|
2026-10-14T14:38:00.292Z |
2026-10-18T13:40:55.669Z |
|
cve-2026-85747
|
|
Distribution: Client `manifests.Get()` does not verify…
|
distribution
|
distribution
|
2026-10-13T18:20:56.539Z |
2026-10-18T13:38:36.137Z |
|
cve-2026-107381
|
|
svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>`…
|
darylldoyle
|
svg-sanitizer
|
2026-10-14T14:53:40.415Z |
2026-10-18T13:36:27.865Z |
|
cve-2026-78433
|
N/A
|
Gitea private attachment disclosure through repository…
|
Gitea
|
Gitea
|
2026-10-14T14:38:17.247Z |
2026-10-18T13:35:37.544Z |
|
cve-2026-73802
|
N/A
|
Gitea Runner host isolation bypass through container options
|
Gitea
|
Gitea Runner
|
2026-10-14T14:37:55.141Z |
2026-10-18T13:34:49.826Z |
|
cve-2026-73800
|
N/A
|
Gitea reusable workflow secret exposure in pull_reques…
|
Gitea
|
Gitea
|
2026-10-14T14:37:49.783Z |
2026-10-18T13:33:34.382Z |
|
cve-2026-73539
|
N/A
|
Gitea external renderer argument injection and code ex…
|
Gitea
|
Gitea
|
2026-10-14T14:37:44.243Z |
2026-10-18T13:32:51.154Z |