|
cve-2026-111717
|
5.3 (v4.0)
4.3 (v3.1)
|
Arkon through 0.9.2 Missing Authorization via Skills V…
|
nduckmink
|
arkon
|
2026-10-16T17:40:05.568Z |
2026-10-16T18:18:24.044Z |
|
cve-2026-109722
|
N/A
|
JIT miscompilation in the JavaScript Engine: JIT component
|
Mozilla
|
Firefox
|
2026-10-13T12:29:19.304Z |
2026-10-16T18:17:34.520Z |
|
cve-2026-111722
|
8.6 (v4.0)
8.1 (v3.1)
|
LingGuo-Drama through commit 8a6924a IDOR via /admin/v…
|
LingGuoAI
|
LingGuo-Drama
|
2026-10-16T17:40:09.064Z |
2026-10-16T18:17:12.430Z |
|
cve-2026-109716
|
N/A
|
Incorrect boundary conditions in the JavaScript Engine…
|
Mozilla
|
Firefox
|
2026-10-13T12:29:18.629Z |
2026-10-16T18:15:34.212Z |
|
cve-2026-111697
|
7.1 (v4.0)
6.5 (v3.1)
|
HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Me…
|
roinli
|
HUIZHI-ChargeOS-cloud
|
2026-10-16T17:39:51.674Z |
2026-10-16T18:15:00.443Z |
|
cve-2026-109715
|
N/A
|
Incorrect boundary conditions in the JavaScript Engine…
|
Mozilla
|
Firefox
|
2026-10-13T12:29:18.421Z |
2026-10-16T18:11:42.481Z |
|
cve-2026-109712
|
N/A
|
Sandbox escape due to uninitialized memory in the Grap…
|
Mozilla
|
Firefox
|
2026-10-13T12:29:18.170Z |
2026-10-16T18:07:45.538Z |
|
cve-2026-111374
|
6 (v4.0)
5.3 (v3.1)
|
FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion …
|
FreeRDP
|
FreeRDP
|
2026-10-16T01:17:41.556Z |
2026-10-16T18:05:37.109Z |
|
cve-2026-78335
|
4.2 (v3.1)
|
Incorrect Authorization in GitLab
|
GitLab
|
GitLab
|
2026-10-13T01:08:01.174Z |
2026-10-16T18:05:31.031Z |
|
cve-2026-89279
|
6.5 (v3.1)
|
Active Directory Password Change CSRF in AuthTake Tech…
|
AuthTake Technology Inc.
|
authtake
|
2026-10-13T11:23:40.069Z |
2026-10-16T18:04:10.281Z |
|
cve-2026-13138
|
8.6 (v3.1)
|
Improper Authorization in Divasoft Software's Biletiva…
|
Divasoft Software and E-Commerce Inc.
|
Biletiva Ticketing Platform
|
2026-10-13T08:37:46.919Z |
2026-10-16T18:02:48.861Z |
|
cve-2026-111323
|
6.9 (v4.0)
5.3 (v3.1)
|
RedAmon through 7.0.1 Unauthenticated SSRF via /tradec…
|
samugit83
|
RedAmon
|
2026-10-15T21:43:31.708Z |
2026-10-16T18:02:23.421Z |
|
cve-2026-82632
|
3.1 (v3.1)
|
Incorrect Authorization in GitLab
|
GitLab
|
GitLab
|
2026-10-13T01:07:11.167Z |
2026-10-16T18:00:51.552Z |
|
cve-2026-111347
|
8.2 (v4.0)
5.9 (v3.1)
|
go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key…
|
opsre
|
go-ldap-admin
|
2026-10-15T21:43:38.664Z |
2026-10-16T18:00:31.558Z |
|
cve-2026-92120
|
|
Apache Allura: Oauth1 Replay Attack
|
Apache Software Foundation
|
Apache Allura
|
2026-10-12T20:08:15.489Z |
2026-10-16T17:59:19.908Z |
|
cve-2026-92119
|
|
Apache Allura: REST API Mass Assignment
|
Apache Software Foundation
|
Apache Allura
|
2026-10-12T20:06:52.868Z |
2026-10-16T17:56:57.098Z |
|
cve-2026-92116
|
|
Apache Allura: OAuth1 missing callback validation
|
Apache Software Foundation
|
Apache Allura
|
2026-10-12T20:04:28.948Z |
2026-10-16T17:55:16.465Z |
|
cve-2026-89140
|
6 (v4.0)
|
Temporal Server internal completion callbacks are not …
|
Temporal Technologies, Inc.
|
Temporal Server
|
2026-10-12T18:44:23.032Z |
2026-10-16T17:52:55.664Z |
|
cve-2026-104355
|
7 (v4.0)
|
Temporal Server applies inbound namespace replication …
|
Temporal Technologies, Inc.
|
Temporal Server
|
2026-10-12T18:43:33.846Z |
2026-10-16T17:50:59.464Z |
|
cve-2026-103061
|
5.9 (v4.0)
|
Path traversal in Gleam via unvalidated package applic…
|
Gleam
|
Gleam
|
2026-10-12T18:23:41.507Z |
2026-10-16T17:49:42.484Z |
|
cve-2026-109448
|
5.9 (v3.1)
|
psqlODBC SQLBindParameter heap memory corruption when …
|
PostgreSQL
|
psqlODBC
|
2026-10-12T17:42:59.581Z |
2026-10-16T17:48:46.624Z |
|
cve-2026-81856
|
2.3 (v4.0)
|
Terminal escape sequence injection in Hex via unneutra…
|
hexpm
|
hex
|
2026-10-12T15:46:12.146Z |
2026-10-16T17:47:15.339Z |
|
cve-2026-103060
|
7.5 (v4.0)
|
Path traversal in rebar3 via unvalidated dependency ap…
|
erlang
|
rebar3
|
2026-10-12T15:43:57.636Z |
2026-10-16T17:44:16.145Z |
|
cve-2026-96612
|
7.5 (v4.0)
|
Path traversal in Hex via unvalidated dependency app names
|
hexpm
|
hex
|
2026-10-12T15:39:49.862Z |
2026-10-16T17:41:58.545Z |
|
cve-2026-85949
|
8.1 (v3.1)
|
Sensitive information exposure in Progress MarkLogic S…
|
Progress Software Corporation
|
MarkLogic Server
|
2026-10-12T15:36:31.613Z |
2026-10-16T17:40:16.383Z |
|
cve-2026-105668
|
7.1 (v4.0)
|
Hex release-age cooldown is lifted package-wide when t…
|
hexpm
|
hex
|
2026-10-12T15:31:58.926Z |
2026-10-16T17:38:34.235Z |
|
cve-2026-105280
|
6.9 (v4.0)
|
Hex writes unverified package tarballs to standard out…
|
hexpm
|
hex
|
2026-10-12T15:30:14.126Z |
2026-10-16T17:37:21.498Z |
|
cve-2026-96618
|
2.1 (v4.0)
|
Hex exhausts memory and disk on oversized or compresse…
|
hexpm
|
hex
|
2026-10-12T15:29:19.117Z |
2026-10-16T17:33:51.114Z |
|
cve-2026-103503
|
5.9 (v4.0)
|
Hex trusts its bundled CA certificates when cacerts_pa…
|
hexpm
|
hex
|
2026-10-12T15:17:45.545Z |
2026-10-16T17:32:45.735Z |
|
cve-2026-92681
|
9.3 (v4.0)
|
@neo4j/graphql: schema-level and type-level @authentic…
|
Neo4j
|
@neo4j/graphql
|
2026-10-12T15:09:49.653Z |
2026-10-16T17:28:41.739Z |