|
cve-2026-54495
|
|
Cross-namespace FeatureFlagSource and InProcessConfigu…
|
open-feature
|
open-feature-operator
|
2026-09-17T19:44:13.222Z |
2026-09-18T14:43:51.856Z |
|
cve-2026-54716
|
|
Valhalla: Degenerate exclude_polygons (collinear point…
|
valhalla
|
valhalla
|
2026-09-17T19:42:57.776Z |
2026-09-18T14:44:00.609Z |
|
cve-2026-45720
|
|
Omni: TOCTOU race condition allows multiple concurrent…
|
siderolabs
|
omni
|
2026-09-17T19:40:57.112Z |
2026-09-17T20:21:50.874Z |
|
cve-2026-45723
|
|
Omni: Operator can traverse image-factory API paths vi…
|
siderolabs
|
omni
|
2026-09-17T19:39:28.303Z |
2026-09-18T20:13:13.232Z |
|
cve-2026-45726
|
|
Omni: Reader-level users can retrieve imported cluster…
|
siderolabs
|
omni
|
2026-09-17T19:37:50.625Z |
2026-09-21T21:09:15.556Z |
|
cve-2026-92757
|
6.8 (v4.0)
5.5 (v3.1)
|
Malformed connection string may disable field level en…
|
MongoDB Inc.
|
MongoDB Entity Framework Core Provider
|
2026-09-17T19:20:37.153Z |
2026-09-17T19:50:41.068Z |
|
cve-2026-93337
|
8.5 (v4.0)
7.8 (v3.1)
|
NetworkManager-l2tp Privilege Escalation via pppd Plug…
|
nm-l2tp
|
NetworkManager-l2tp
|
2026-09-17T19:17:14.537Z |
2026-09-23T18:07:08.359Z |
|
cve-2026-92758
|
5.7 (v4.0)
5.5 (v3.1)
|
Logs may collect sensitive information
|
MongoDB Inc.
|
MongoDB Entity Framework Core Provider
|
2026-09-17T19:16:13.622Z |
2026-09-17T19:53:43.819Z |
|
cve-2026-92993
|
|
Dromara mayfly-go Machine Script Feature machine_scrip…
|
Dromara
|
mayfly-go
|
2026-09-17T19:15:15.237Z |
2026-09-22T15:44:54.001Z |
|
cve-2026-92943
|
8.1 (v3.1)
9.2 (v4.0)
|
Improper validation of certificate with host mismatch …
|
AWS
|
AWSIoTPythonSDK
|
2026-09-17T19:14:56.865Z |
2026-09-17T19:57:09.515Z |
|
cve-2026-92756
|
6.8 (v4.0)
5.5 (v3.1)
|
Combining encryption settings may disable encryption
|
MongoDB Inc.
|
MongoDB Entity Framework Core Provider
|
2026-09-17T19:04:51.747Z |
2026-09-17T20:02:17.860Z |
|
cve-2026-90997
|
7.4 (v3.1)
|
Keycloak-services: keycloak: replay protection bypass …
|
Keycloak
|
Keycloak
|
2026-09-17T18:47:34.059Z |
2026-09-25T06:42:50.534Z |
|
cve-2026-19477
|
7.8 (v3.1)
8.6 (v4.0)
|
Stack-based Buffer Overflow Vulnerability in Linux (uldaq)
|
MCC
|
Universal Library for Linux (uldaq)
|
2026-09-17T18:42:17.190Z |
2026-09-28T15:49:05.252Z |
|
cve-2026-92230
|
|
Apache Karaf: Improper release of ClassLoader referenc…
|
Apache Software Foundation
|
Apache Karaf
|
2026-09-17T18:38:29.556Z |
2026-09-18T13:33:04.842Z |
|
cve-2026-54253
|
|
TS3 Manager: Reflected XSS via /api/download port para…
|
joni1802
|
ts3-manager
|
2026-09-17T18:37:38.022Z |
2026-09-23T19:44:00.241Z |
|
cve-2026-54504
|
|
MCP Documentation Server: Web UI API binds to all inte…
|
andrea9293
|
mcp-documentation-server
|
2026-09-17T18:36:40.763Z |
2026-09-17T19:09:50.152Z |
|
cve-2026-54617
|
|
GravitLauncher: Unauthenticated path traversal in Laun…
|
GravitLauncher
|
Launcher
|
2026-09-17T18:34:40.563Z |
2026-09-18T18:33:25.740Z |
|
cve-2026-54524
|
|
Frappe HR: SQL Injection in HRMS Salary Payments Based…
|
frappe
|
hrms
|
2026-09-17T18:33:37.558Z |
2026-09-17T19:00:53.087Z |
|
cve-2026-52852
|
|
Traccar: Uncontrolled Infinite Loop DoS via Group Pare…
|
traccar
|
traccar
|
2026-09-17T18:32:07.436Z |
2026-09-21T21:07:12.626Z |
|
cve-2026-52851
|
|
Traccar: Authenticated Blind SQL Injection in DELETE /…
|
traccar
|
traccar
|
2026-09-17T18:30:33.414Z |
2026-09-17T19:05:00.756Z |
|
cve-2026-92992
|
|
Dromara mayfly-go AI Assistant ai.go authorization
|
Dromara
|
mayfly-go
|
2026-09-17T18:30:15.031Z |
2026-09-17T19:09:08.362Z |
|
cve-2026-54649
|
|
punchin-email: Operator inbox (FORWARD_TO) disclosed t…
|
PunchIn-App
|
punchin-email
|
2026-09-17T18:29:23.937Z |
2026-09-24T20:55:22.973Z |
|
cve-2026-54571
|
|
ESPAsyncWebServer: Integer overflow in multipart bound…
|
ESP32Async
|
ESPAsyncWebServer
|
2026-09-17T18:28:26.977Z |
2026-09-21T21:05:49.373Z |
|
cve-2026-49292
|
|
Kiwi TCMS: The /init-db/ page renders and responds to …
|
kiwitcms
|
Kiwi
|
2026-09-17T18:27:10.306Z |
2026-09-17T19:11:15.766Z |
|
cve-2026-54239
|
|
FaustWP — Authentication Bypass via Initialization Ve…
|
wpengine
|
faustjs
|
2026-09-17T18:25:36.503Z |
2026-09-18T18:33:34.727Z |
|
cve-2026-55061
|
|
uniget: EDITOR Command Injection in uniget CLI
|
uniget-org
|
cli
|
2026-09-17T18:23:15.321Z |
2026-09-18T14:44:09.945Z |
|
cve-2026-55062
|
|
uniget: Path Traversal in Hook Files - Directory Escap…
|
uniget-org
|
cli
|
2026-09-17T18:22:21.656Z |
2026-09-23T19:13:01.161Z |
|
cve-2026-52727
|
|
lxc-ci: Pacman keyring stored in archlinux image with …
|
lxc
|
lxc-ci
|
2026-09-17T18:21:21.718Z |
2026-09-17T19:09:46.925Z |
|
cve-2026-54451
|
|
Elixir protobuf: Unbounded recursion depth in embedded…
|
elixir-protobuf
|
protobuf
|
2026-09-17T18:19:25.334Z |
2026-09-21T21:03:54.370Z |
|
cve-2026-47252
|
|
Anyquery: AppleScript/JXA Code Injection via Unescaped…
|
julien040
|
anyquery
|
2026-09-17T18:17:43.939Z |
2026-09-17T19:12:07.053Z |