|
cve-2026-25278
|
7.8 (v3.1)
|
Time-of-check Time-of-use (TOCTOU) Race Condition in A…
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:38.778Z |
2026-09-17T14:37:21.873Z |
|
cve-2026-25275
|
7.5 (v3.1)
|
Buffer Over-read in WLAN Firmware
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:36.050Z |
2026-09-17T14:36:15.684Z |
|
cve-2026-25261
|
6.7 (v3.1)
|
Untrusted Pointer Dereference in Camera
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:33.429Z |
2026-09-17T14:35:22.565Z |
|
cve-2026-24081
|
7.4 (v3.1)
|
Buffer Over-read in BT Controller
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:30.537Z |
2026-09-17T14:34:49.663Z |
|
cve-2026-24075
|
7.8 (v3.1)
|
Buffer Over-read in Qualcomm IPC
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:28.165Z |
2026-09-17T14:34:25.445Z |
|
cve-2026-24074
|
7.8 (v3.1)
|
Out-of-bounds Write in Video
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:25.700Z |
2026-09-17T12:49:44.023Z |
|
cve-2026-24073
|
7.8 (v3.1)
|
Out-of-bounds Write in Video
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:23.227Z |
2026-09-17T12:51:38.769Z |
|
cve-2025-59607
|
7.8 (v3.1)
|
Untrusted Pointer Dereference in Windows Compute
|
Qualcomm, Inc.
|
Snapdragon
|
2026-09-17T04:11:20.822Z |
2026-09-17T12:52:11.746Z |
|
cve-2026-50604
|
4.9 (v4.0)
|
Unauthenticated Access Vulnerability in NitroSense and…
|
Acer
|
Agent Service
|
2026-09-17T04:06:40.354Z |
2026-09-17T12:52:56.787Z |
|
cve-2026-50603
|
4.9 (v4.0)
|
Hard-coded encryption key vulnerability in Acer Agent …
|
Acer
|
Agent Service
|
2026-09-17T04:01:12.295Z |
2026-09-17T14:48:17.751Z |
|
cve-2026-92839
|
4.3 (v3.1)
|
Canva Desktop before v1.125.0 performed double de…
|
Canva
|
Canva
|
2026-09-17T03:53:51.927Z |
2026-09-17T12:59:01.029Z |
|
cve-2026-86311
|
|
Photo Gallery by 10Web – Mobile-Friendly Image Gallery…
|
10web
|
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
|
2026-09-17T03:39:14.790Z |
2026-09-17T12:59:52.215Z |
|
cve-2026-89064
|
|
All-in-One WP Migration and Backup <= 7.110 - Unauthen…
|
servmask
|
All-in-One WP Migration and Backup
|
2026-09-17T02:27:59.585Z |
2026-09-18T14:45:13.520Z |
|
cve-2026-92838
|
7.8 (v3.1)
|
GeoVision GV-Remote E-Map dll hijacking vulnerability
|
GeoVision Inc.
|
GV-Remote E-map
|
2026-09-17T01:50:05.966Z |
2026-09-17T13:01:41.696Z |
|
cve-2026-81546
|
7.7 (v3.1)
|
The Affinity by Canva application before 3.3.0 (S…
|
Canva
|
Affinity
|
2026-09-17T01:39:59.447Z |
2026-09-17T13:02:52.427Z |
|
cve-2026-52483
|
N/A
|
The ping diagnostics and other similar functions …
|
n/a
|
n/a
|
2026-09-17T00:00:00.000Z |
2026-09-19T02:12:10.054Z |
|
cve-2025-55787
|
N/A
|
In MailData Email Archiving System v4.2 and earli…
|
n/a
|
n/a
|
2026-09-17T00:00:00.000Z |
2026-09-18T20:23:15.880Z |
|
cve-2021-3030
|
N/A
|
Cute Editor for ASP.NET 6.4 is vulnerable to refl…
|
n/a
|
n/a
|
2026-09-17T00:00:00.000Z |
2026-09-18T13:36:03.597Z |
|
cve-2026-65388
|
N/A
|
A remote attacker who controls a container regist…
|
Apple
|
containerization
|
2026-09-16T22:24:20.049Z |
2026-09-17T13:05:53.780Z |
|
cve-2026-61599
|
|
djust has an unauthenticated arbitrary module import v…
|
djust-org
|
djust
|
2026-09-16T22:11:45.780Z |
2026-09-17T13:21:22.309Z |
|
cve-2026-61589
|
|
djust: WebSocket/runtime reconstructed request omits t…
|
djust-org
|
djust
|
2026-09-16T22:08:52.415Z |
2026-09-17T19:23:05.705Z |
|
cve-2026-61596
|
|
djust has broken object-level access control (IDOR)
|
djust-org
|
djust
|
2026-09-16T22:07:20.564Z |
2026-09-17T14:40:10.907Z |
|
cve-2026-61588
|
|
djust's Django model serialization has no sensitive-fi…
|
djust-org
|
djust
|
2026-09-16T22:04:03.442Z |
2026-09-19T02:06:36.974Z |
|
cve-2026-61594
|
|
djust has an authorization bypass on the WebSocket/SSE…
|
djust-org
|
djust
|
2026-09-16T21:59:01.907Z |
2026-09-17T14:39:07.324Z |
|
cve-2026-61591
|
|
djust: Unsigned client state snapshot is restored as t…
|
djust-org
|
djust
|
2026-09-16T21:57:26.957Z |
2026-09-17T13:22:26.195Z |
|
cve-2026-61592
|
|
djust: SSE sessions are not bound to the authenticated…
|
djust-org
|
djust
|
2026-09-16T21:53:33.859Z |
2026-09-17T19:23:13.215Z |
|
cve-2026-61597
|
|
djust is vulnerable to stored/reflected XSS via javasc…
|
djust-org
|
djust
|
2026-09-16T21:51:38.339Z |
2026-09-17T15:06:13.521Z |
|
cve-2026-92599
|
8.7 (v4.0)
7.5 (v3.1)
|
Joi before 17.13.7 and 18.2.6 ReDoS via isoDate
|
hapijs
|
joi
|
2026-09-16T21:47:03.073Z |
2026-09-18T20:06:43.275Z |
|
cve-2026-92598
|
8.3 (v4.0)
6.5 (v3.1)
|
Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list…
|
nodemailer
|
nodemailer
|
2026-09-16T21:47:02.365Z |
2026-09-17T14:43:20.281Z |
|
cve-2026-92597
|
8.3 (v4.0)
6.5 (v3.1)
|
Nodemailer before 9.1.0 Email Domain Validation Bypass…
|
nodemailer
|
nodemailer
|
2026-09-16T21:47:01.599Z |
2026-09-17T19:23:22.319Z |