Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-103503 5.9 (v4.0) Hex trusts its bundled CA certificates when cacerts_pa… hexpm
hex
2026-10-12T15:17:45.545Z 2026-10-16T17:32:45.735Z
cve-2026-92681 9.3 (v4.0) @neo4j/graphql: schema-level and type-level @authentic… Neo4j
@neo4j/graphql
2026-10-12T15:09:49.653Z 2026-10-16T17:28:41.739Z
cve-2026-92682 8.6 (v4.0) @neo4j/graphql: authorization relationship and connect… Neo4j
@neo4j/graphql
2026-10-12T15:07:44.638Z 2026-10-16T17:27:47.458Z
cve-2026-103527 N/A CVE-2026-103527 Thelia
Thelia
2026-10-12T14:54:53.807Z 2026-10-16T17:24:55.616Z
cve-2025-71428 6.9 (v4.0) 4.9 (v3.1) Jivejdon through 5.0 SQL Injection via username in use… banq
jivejdon
2026-10-08T21:51:27.411Z 2026-10-16T17:20:14.651Z
cve-2026-85957 7.5 (v3.1) Improper XML external entity restriction in Progress M… Progress Software Corporation
MarkLogic Server
2026-10-12T16:01:34.049Z 2026-10-16T17:19:55.107Z
cve-2026-85976 5.4 (v3.1) HTTP response splitting in Progress MarkLogic Server Q… Progress Software Corporation
MarkLogic Server
2026-10-12T16:56:54.035Z 2026-10-16T17:19:45.401Z
cve-2026-108924 getkirby Kirby Dynamic Option Generation OptionsQuery.… getkirby
Kirby
2026-10-12T19:30:14.551Z 2026-10-16T17:19:37.353Z
cve-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection Netcore
NR268
2026-10-12T20:30:18.334Z 2026-10-16T17:19:27.963Z
cve-2026-92876 7.5 (v3.1) IBM Maximo Application Suite - IoT Component Denial of… IBM
Maximo Application Suite - IoT Component
2026-10-12T21:42:42.280Z 2026-10-16T17:19:19.257Z
cve-2026-108933 Edimax BR-6208AC formFilter cross site scripting Edimax
BR-6208AC
2026-10-12T21:45:11.710Z 2026-10-16T17:19:10.453Z
cve-2026-89309 10 (v4.0) 10 (v3.1) Missing Authentication Vulnerability in JTL-WMS JTL SW GmbH
JTL-WMS
2026-10-13T08:38:59.289Z 2026-10-16T17:18:59.997Z
cve-2026-101020 7.8 (v3.0) 8.5 (v4.0) An incorrect permission assignment for critical r… Hammock Corporation
AssetView
2026-10-13T08:40:15.589Z 2026-10-16T17:18:51.739Z
cve-2026-96535 5.1 (v4.0) Cross-Site Scripting in the YouMind web application YouMind
YouMind web application
2026-10-13T08:41:05.153Z 2026-10-16T17:18:42.653Z
cve-2026-109143 calcom cal.com/cal.diy Credentials delete credentials.… calcom
cal.com
2026-10-13T09:00:16.315Z 2026-10-16T17:18:35.003Z
cve-2026-59241 A vulnerability has been identified in SIMATIC Wi… Siemens
SIMATIC WinCC V7.5
2026-10-13T09:18:29.536Z 2026-10-16T17:18:25.910Z
cve-2026-63354 Affected devices do not properly validate and san… Siemens
SIMATIC Drive Controller CPU 1504D TF
2026-10-13T09:18:42.867Z 2026-10-16T17:18:18.187Z
cve-2026-78556 A vulnerability has been identified in Industrial… Siemens
Industrial Edge App Publisher
2026-10-13T09:18:55.291Z 2026-10-16T17:18:08.808Z
cve-2026-89197 A vulnerability has been identified in RUGGEDCOM … Siemens
RUGGEDCOM CROSSBOW
2026-10-13T09:19:00.790Z 2026-10-16T17:17:58.161Z
cve-2026-89202 A vulnerability has been identified in RUGGEDCOM … Siemens
RUGGEDCOM CROSSBOW
2026-10-13T09:19:06.397Z 2026-10-16T17:17:49.500Z
cve-2026-109162 6.3 (v4.0) TYPO3 CMS - Security Misconfiguration in Form Framework TYPO3
TYPO3 CMS
2026-10-13T09:27:24.320Z 2026-10-16T17:17:41.990Z
cve-2026-109153 MosaicML Composer Checkpoint Extraction checkpoint.py … MosaicML
Composer
2026-10-13T10:00:20.259Z 2026-10-16T17:17:33.320Z
cve-2026-109160 PublicCMS pay Endpoint SafeConfigComponent.java SafeCo… n/a
PublicCMS
2026-10-13T11:00:14.244Z 2026-10-16T17:17:24.257Z
cve-2026-63316 8.7 (v4.0) SQL Injection in Payload CMS Payload
Payload CMS
2026-10-13T11:05:09.403Z 2026-10-16T17:17:14.851Z
cve-2026-79715 5.5 (v3.1) IBM WebSphere Application Server Liberty Path Traversal IBM
WebSphere Application Server - Liberty
2026-10-13T20:14:45.202Z 2026-10-16T17:17:06.879Z
cve-2026-105443 8.2 (v3.1) IBM WebSphere Application Server Liberty is affected b… IBM
WebSphere Application Server - Liberty
2026-10-13T20:17:03.461Z 2026-10-16T17:16:58.050Z
cve-2026-95696 6.5 (v3.1) IBM WebSphere Application Server Liberty Denial of Service IBM
WebSphere Application Server - Liberty
2026-10-13T20:17:40.335Z 2026-10-16T17:16:51.532Z
cve-2026-110603 5.8 (v4.0) 6.3 (v3.1) LASzip through 3.5.0 Invalid Free via Truncated VLR He… rapidlasso
LASzip
2026-10-14T14:16:44.360Z 2026-10-16T17:16:44.388Z
cve-2026-110608 5.3 (v4.0) 5.4 (v3.1) BizSpring Shop through commit cf22d39daaf1 IDOR via /m… BizSpring
BizSpring Shop
2026-10-14T14:16:49.839Z 2026-10-16T17:16:36.942Z
cve-2026-103524 N/A CVE-2026-103524 Thelia
Thelia
2026-10-12T14:54:16.912Z 2026-10-16T17:16:31.779Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description