|
cve-2026-111321
|
5.3 (v4.0)
5.4 (v3.1)
|
TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].ur…
|
TaskingAI
|
TaskingAI
|
2026-10-15T21:43:30.254Z |
2026-10-16T17:08:55.995Z |
|
cve-2026-111330
|
8.2 (v4.0)
5.9 (v3.1)
|
JuggleIM im-server through 1.8.16 Weak Password Hashin…
|
juggleim
|
JuggleIM
|
2026-10-15T21:43:33.735Z |
2026-10-16T17:08:47.183Z |
|
cve-2026-111345
|
5.3 (v4.0)
4.3 (v3.1)
|
Trudesk through 1.2.11 Authorization Bypass via GET /a…
|
polonel
|
trudesk
|
2026-10-15T21:43:37.267Z |
2026-10-16T17:08:37.622Z |
|
cve-2026-111350
|
2.3 (v4.0)
5 (v3.1)
|
Papermark through 0.22.0 Missing Authorization in Data…
|
papermark
|
Papermark
|
2026-10-15T21:43:40.792Z |
2026-10-16T17:08:28.899Z |
|
cve-2026-111355
|
5.3 (v4.0)
6.3 (v3.1)
|
zhontai Admin.Core through 10.1.0 Authorization Bypass…
|
zhontai
|
Admin.Core
|
2026-10-15T21:43:44.503Z |
2026-10-16T17:08:19.434Z |
|
cve-2026-111364
|
7.1 (v4.0)
6.5 (v3.1)
|
MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:…
|
mindoc-org
|
MinDoc
|
2026-10-15T21:43:48.449Z |
2026-10-16T17:08:10.511Z |
|
cve-2026-21119
|
4.8 (v4.0)
|
Out-of-bounds read and write in lib_sag_ai_sound_…
|
Samsung Mobile
|
Samsung Mobile Devices
|
2026-10-12T04:57:34.911Z |
2026-10-16T17:08:10.342Z |
|
cve-2026-111369
|
7.1 (v4.0)
7.1 (v3.1)
|
ClassroomIO through 1.0.0 Incorrect Authorization via …
|
classroomio
|
ClassroomIO
|
2026-10-15T21:43:52.330Z |
2026-10-16T17:08:02.709Z |
|
cve-2026-111210
|
|
bitcoinj Payment Request PaymentSession.java url.openC…
|
n/a
|
bitcoinj
|
2026-10-16T00:00:18.048Z |
2026-10-16T17:07:45.465Z |
|
cve-2026-111377
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Stat…
|
FreeRDP
|
FreeRDP
|
2026-10-16T01:17:45.045Z |
2026-10-16T17:07:38.827Z |
|
cve-2026-111382
|
8.7 (v4.0)
8.8 (v3.1)
|
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC4…
|
FreeRDP
|
FreeRDP
|
2026-10-16T01:17:51.334Z |
2026-10-16T17:07:31.487Z |
|
cve-2026-111387
|
7.1 (v4.0)
6.5 (v3.1)
|
Nezha 2.2.5 before 2.3.15 Information Disclosure via D…
|
nezhahq
|
nezha
|
2026-10-16T01:17:55.957Z |
2026-10-16T17:07:24.986Z |
|
cve-2026-104798
|
|
My Calendar <= 3.8.7 - Unauthenticated Privilege Escal…
|
joedolson
|
My Calendar – Accessible Event Manager
|
2026-10-16T04:27:04.876Z |
2026-10-16T17:07:17.621Z |
|
cve-2026-107659
|
|
Modula Image Gallery <= 3.0.11 - Missing Authorization…
|
wpchill
|
Modula Image Gallery – Photo Grid & Video Gallery
|
2026-10-16T04:27:05.213Z |
2026-10-16T17:07:09.932Z |
|
cve-2026-109221
|
|
Groundhogg <= 4.9.3 - Authenticated (Sales Representat…
|
trainingbusinesspros
|
Groundhogg — CRM, Newsletters, and Marketing Automation
|
2026-10-16T04:27:05.579Z |
2026-10-16T17:07:01.282Z |
|
cve-2026-89079
|
|
Theme My Login <= 7.2.1 - Unauthenticated Privilege Es…
|
jfarthing84
|
Theme My Login
|
2026-10-16T05:30:22.643Z |
2026-10-16T17:06:54.311Z |
|
cve-2026-12272
|
|
Lightweight Cookie Notice <= 1.19 - Sensitive Informat…
|
daext
|
Lightweight Cookie Notice – Cookie Banner for Cookie Consent
|
2026-10-16T05:30:22.999Z |
2026-10-16T17:06:46.117Z |
|
cve-2026-111728
|
5.3 (v4.0)
5.4 (v3.1)
|
Seanime v3.10.3 Argument Injection via TranscodeHwAcce…
|
5rahim
|
Seanime
|
2026-10-16T15:02:08.025Z |
2026-10-16T17:06:38.459Z |
|
cve-2026-54657
|
|
Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobje…
|
open-zaak
|
open-zaak
|
2026-10-16T15:21:57.401Z |
2026-10-16T17:06:31.247Z |
|
cve-2026-57447
|
|
Discourse Doc Categories: Doc category index refresh l…
|
discourse
|
discourse-doc-categories
|
2026-10-16T15:31:10.493Z |
2026-10-16T17:06:24.293Z |
|
cve-2026-77630
|
|
pupnp: Denial of service via blocking DNS resolution i…
|
pupnp
|
pupnp
|
2026-10-16T15:36:05.117Z |
2026-10-16T17:06:16.423Z |
|
cve-2026-68907
|
|
libIEC61850: Server-side out-of-bounds stack read in a…
|
mz-automation
|
libiec61850
|
2026-10-16T15:48:33.080Z |
2026-10-16T17:05:59.282Z |
|
cve-2026-42269
|
|
countly-server: Path Traversal in delete_import Endpoi…
|
Countly
|
countly-server
|
2026-10-16T15:59:04.637Z |
2026-10-16T17:05:51.713Z |
|
cve-2026-85985
|
|
MariaDB: Unauthorized file access via CONNECT engine UDFs
|
MariaDB
|
server
|
2026-10-16T16:21:14.677Z |
2026-10-16T17:05:42.975Z |
|
cve-2026-92877
|
8.3 (v4.0)
|
The JAXB factory methods historically relied sole…
|
Eclipse Foundation
|
jaxb-ri (core)
|
2026-10-12T14:19:28.195Z |
2026-10-16T17:05:38.314Z |
|
cve-2026-85746
|
|
MariaDB: Out-of-bound buffer write on in `ST_AsText` o…
|
MariaDB
|
server
|
2026-10-16T16:27:36.763Z |
2026-10-16T17:05:31.146Z |
|
cve-2026-103502
|
5.9 (v4.0)
|
hex_core's default HTTP adapter doesn't verify TLS cer…
|
hexpm
|
hex_core
|
2026-10-12T13:15:29.040Z |
2026-10-16T16:58:36.248Z |
|
cve-2026-85748
|
|
MariaDB: Use-after-free with a large number of SYS_REF…
|
MariaDB
|
server
|
2026-10-16T16:28:55.829Z |
2026-10-16T16:54:40.841Z |
|
cve-2026-86008
|
|
Mailu domain managers can take over higher-privileged …
|
Mailu
|
Mailu
|
2026-10-16T16:16:51.097Z |
2026-10-16T16:53:59.579Z |
|
cve-2026-105283
|
6.3 (v4.0)
|
Internal error terms inspected into AshTypescript RPC …
|
ash-project
|
ash_typescript
|
2026-10-12T11:16:30.582Z |
2026-10-16T16:53:18.072Z |