|
cve-2026-79752
|
|
CakePHP: Multiple methods in FunctionsBuilder vulnerab…
|
cakephp
|
cakephp
|
2026-09-17T14:49:56.936Z |
2026-09-17T15:20:00.313Z |
|
cve-2026-61793
|
|
Nuxt OG Image has unauthenticated SSRF via `fonts[].pa…
|
nuxt-modules
|
og-image
|
2026-09-17T14:48:52.552Z |
2026-09-17T15:15:46.383Z |
|
cve-2026-81447
|
6.8 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T14:47:54.450Z |
2026-09-18T03:56:02.106Z |
|
cve-2026-63459
|
|
Vendure: Stored XSS in the Admin Dashboard via unsafe …
|
vendurehq
|
vendure
|
2026-09-17T14:45:39.650Z |
2026-09-21T20:46:16.224Z |
|
cve-2026-63461
|
|
Vendure: Shop API list queries can return non-public e…
|
vendurehq
|
vendure
|
2026-09-17T14:43:01.879Z |
2026-09-17T19:19:43.824Z |
|
cve-2026-63472
|
|
Vendure: External-authentication account takeover: ext…
|
vendurehq
|
vendure
|
2026-09-17T14:40:31.353Z |
2026-09-17T15:21:11.192Z |
|
cve-2026-63460
|
|
Vendure: Unauthenticated ReDoS via `regex` filter on S…
|
vendurehq
|
vendure
|
2026-09-17T14:38:45.282Z |
2026-09-17T15:04:11.699Z |
|
cve-2026-80356
|
7.3 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T14:38:22.873Z |
2026-09-17T15:26:27.602Z |
|
cve-2026-71538
|
|
@cyclonedx/cyclonedx-npm: Shell Injection via Unsaniti…
|
CycloneDX
|
cyclonedx-node-npm
|
2026-09-17T14:35:39.144Z |
2026-09-17T15:30:52.840Z |
|
cve-2026-81446
|
7.4 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T14:32:30.538Z |
2026-09-19T14:21:53.228Z |
|
cve-2026-85078
|
|
sanic chunked trailer request smuggling allows hidden …
|
sanic-org
|
sanic
|
2026-09-17T14:28:37.286Z |
2026-09-17T19:19:53.849Z |
|
cve-2026-81445
|
7.2 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T14:27:25.225Z |
2026-09-18T03:55:50.936Z |
|
cve-2026-85077
|
|
Sanic: HTTP response header injection via missing CR/L…
|
sanic-org
|
sanic
|
2026-09-17T14:26:39.826Z |
2026-09-21T20:45:15.589Z |
|
cve-2026-77614
|
|
Opencast: Session fixation in login enables account ta…
|
opencast
|
opencast
|
2026-09-17T14:23:27.476Z |
2026-09-17T15:33:11.344Z |
|
cve-2026-92987
|
8.7 (v4.0)
7.5 (v3.1)
|
roxmltree through 0.21.1 Denial of Service via Quadrat…
|
RazrFalcon
|
roxmltree
|
2026-09-17T14:22:10.913Z |
2026-09-24T14:22:59.550Z |
|
cve-2026-92986
|
8.6 (v4.0)
8.8 (v3.1)
|
SiYuan before 3.8.4 Cross-Site Scripting via Document Title
|
siyuan-note
|
siyuan
|
2026-09-17T14:22:10.251Z |
2026-09-17T19:20:06.691Z |
|
cve-2026-92985
|
8.6 (v4.0)
8.8 (v3.1)
|
SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels
|
siyuan-note
|
siyuan
|
2026-09-17T14:22:09.581Z |
2026-09-17T15:23:20.675Z |
|
cve-2026-92984
|
8.5 (v4.0)
8.1 (v3.1)
|
HUBzero CMS through 2.2.32 Session Fixation via Query-…
|
hubzero
|
hubzero-cms
|
2026-09-17T14:22:08.931Z |
2026-09-21T20:43:24.447Z |
|
cve-2026-92983
|
8.7 (v4.0)
7.5 (v3.1)
|
InternLM LMDeploy through 0.17.0 Memory Exhaustion via…
|
InternLM
|
lmdeploy
|
2026-09-17T14:22:08.232Z |
2026-09-18T19:18:29.048Z |
|
cve-2026-88952
|
9.1 (v4.0)
|
OAuth2 sign-in attached to an existing account without…
|
team-alembic
|
ash_authentication
|
2026-09-17T14:15:19.506Z |
2026-09-17T19:32:55.621Z |
|
cve-2026-81453
|
6.5 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T14:02:21.594Z |
2026-09-17T19:20:17.852Z |
|
cve-2026-81829
|
5.3 (v3.1)
|
Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unau…
|
Red Hat
|
Red Hat build of Quarkus 3.27.5.SP2
|
2026-09-17T14:01:30.083Z |
2026-10-09T16:26:17.785Z |
|
cve-2026-92879
|
|
vgmstream mus_acm.c parse_mus resource consumption
|
n/a
|
vgmstream
|
2026-09-17T14:00:13.224Z |
2026-09-17T15:36:51.641Z |
|
cve-2026-81443
|
6.4 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T13:52:36.356Z |
2026-09-19T14:21:53.407Z |
|
cve-2026-81442
|
8.1 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T13:46:43.663Z |
2026-09-17T15:37:58.502Z |
|
cve-2026-92963
|
6.9 (v4.0)
5.3 (v3.1)
|
vm2 before 3.11.2 Information Disclosure via Internal State
|
patriksimek
|
vm2
|
2026-09-17T13:46:18.972Z |
2026-09-18T19:15:28.242Z |
|
cve-2026-92962
|
2.1 (v4.0)
|
vm2 before 3.11.4 Defense Invariant Violation via setu…
|
patriksimek
|
vm2
|
2026-09-17T13:46:18.295Z |
2026-09-17T15:40:44.491Z |
|
cve-2026-92961
|
8.7 (v4.0)
7.5 (v3.1)
|
vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllo…
|
patriksimek
|
vm2
|
2026-09-17T13:46:17.621Z |
2026-09-21T20:52:43.708Z |
|
cve-2026-92960
|
10 (v4.0)
10 (v3.1)
|
vm2 before 3.11.6 Process-wide State Exposure via os and dns
|
patriksimek
|
vm2
|
2026-09-17T13:46:16.952Z |
2026-09-17T14:22:01.645Z |
|
cve-2026-71568
|
5.3 (v3.1)
|
BMCtest exposes Ironic without authentication and TLS …
|
openshift-metal3
|
bmctest
|
2026-09-17T13:46:16.878Z |
2026-09-17T19:34:27.498Z |