|
cve-2026-92596
|
8.7 (v4.0)
7.5 (v3.1)
|
Nodemailer before 9.1.0 Denial of Service via addressparser
|
nodemailer
|
nodemailer
|
2026-09-16T21:47:00.900Z |
2026-09-17T13:23:33.704Z |
|
cve-2026-92595
|
6 (v4.0)
5.9 (v3.1)
|
Nodemailer before 9.1.1 Security Sandbox Bypass via re…
|
nodemailer
|
nodemailer
|
2026-09-16T21:47:00.171Z |
2026-09-19T02:05:35.346Z |
|
cve-2026-92594
|
8.7 (v4.0)
7.5 (v3.1)
|
Craft CMS before 5.11.0 Unauthenticated PII Disclosure…
|
craftcms
|
cms
|
2026-09-16T21:46:59.423Z |
2026-09-18T20:08:12.977Z |
|
cve-2026-92593
|
8.7 (v4.0)
8.8 (v3.1)
|
Craft CMS 5.10.0 before 5.10.13 Authenticated Remote C…
|
craftcms
|
cms
|
2026-09-16T21:46:58.692Z |
2026-09-17T14:45:54.536Z |
|
cve-2026-92592
|
8.7 (v4.0)
8.8 (v3.1)
|
Craft CMS before 4.18.6 Remote Code Execution via sign…
|
craftcms
|
cms
|
2026-09-16T21:46:57.949Z |
2026-09-17T19:23:31.247Z |
|
cve-2026-92591
|
8.2 (v4.0)
5.9 (v3.1)
|
Craft CMS 5.0.0 before 5.10.13 Environment Secret Expo…
|
craftcms
|
cms
|
2026-09-16T21:46:57.263Z |
2026-09-17T13:26:27.358Z |
|
cve-2026-92590
|
5.1 (v4.0)
5.4 (v3.1)
|
Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generate…
|
craftcms
|
cms
|
2026-09-16T21:46:56.556Z |
2026-09-19T02:04:23.960Z |
|
cve-2026-92589
|
5.3 (v4.0)
4.3 (v3.1)
|
Craft CMS 5.0.0 before 5.10.13 Broken Access Control v…
|
craftcms
|
cms
|
2026-09-16T21:46:55.216Z |
2026-09-18T20:12:02.490Z |
|
cve-2026-92588
|
5.9 (v4.0)
4.4 (v3.1)
|
n8n before 1.123.76 Improper Authorization via Source …
|
n8n-io
|
n8n
|
2026-09-16T21:46:54.429Z |
2026-10-29T21:17:09.865Z |
|
cve-2026-92587
|
5.3 (v4.0)
5 (v3.1)
|
n8n before 1.123.76 Sandbox Escape via Git Relative URL
|
n8n-io
|
n8n
|
2026-09-16T21:46:53.659Z |
2026-10-29T21:17:09.218Z |
|
cve-2026-92586
|
5.3 (v4.0)
4.3 (v3.1)
|
AVideo through 29.0 Missing Authorization via comment …
|
WWBN
|
AVideo
|
2026-09-16T21:46:52.941Z |
2026-09-17T13:30:00.137Z |
|
cve-2026-92585
|
5.3 (v4.0)
4.3 (v3.1)
|
AVideo through 29.0 Missing Authorization Check via AP…
|
WWBN
|
AVideo
|
2026-09-16T21:46:52.260Z |
2026-09-19T02:03:35.521Z |
|
cve-2026-92584
|
5.3 (v4.0)
6.1 (v3.1)
|
AVideo through 29.0 Stored Cross-Site Scripting via Us…
|
WWBN
|
AVideo
|
2026-09-16T21:46:51.541Z |
2026-09-21T14:55:13.089Z |
|
cve-2026-92583
|
6.9 (v4.0)
6.5 (v3.1)
|
AVideo through 29.0 Rate Limit Bypass via Non-Atomic C…
|
WWBN
|
AVideo
|
2026-09-16T21:46:50.833Z |
2026-09-17T14:49:33.344Z |
|
cve-2026-92582
|
7.1 (v4.0)
7.1 (v3.1)
|
AVideo through 29.0 Broken Access Control via videoAdd…
|
WWBN
|
AVideo
|
2026-09-16T21:46:50.142Z |
2026-09-17T19:23:41.097Z |
|
cve-2026-92581
|
5.3 (v4.0)
4.3 (v3.1)
|
AVideo through 29.0 Like Counter Desynchronization via…
|
WWBN
|
AVideo
|
2026-09-16T21:46:49.409Z |
2026-09-17T14:49:51.086Z |
|
cve-2026-92580
|
8.7 (v4.0)
8.8 (v3.1)
|
AVideo through 29.0 CloneSite Stored Shell Injection v…
|
WWBN
|
AVideo
|
2026-09-16T21:46:48.648Z |
2026-09-19T02:01:45.439Z |
|
cve-2026-92579
|
5.3 (v4.0)
5.4 (v3.1)
|
AVideo through 29.0 Broken Access Control via CSRF Exe…
|
WWBN
|
AVideo
|
2026-09-16T21:46:47.891Z |
2026-09-18T20:13:56.256Z |
|
cve-2026-92578
|
9.2 (v4.0)
8.1 (v3.1)
|
WWBN AVideo through 29.0 Authentication Bypass via Sto…
|
WWBN
|
AVideo
|
2026-09-16T21:46:47.151Z |
2026-09-17T14:52:56.526Z |
|
cve-2026-92577
|
8.7 (v4.0)
7.5 (v3.1)
|
AVideo through 29.0 API get_api_video Broken Access Co…
|
WWBN
|
AVideo
|
2026-09-16T21:46:46.351Z |
2026-09-17T19:23:51.702Z |
|
cve-2026-92576
|
9.2 (v4.0)
8.6 (v3.1)
|
HKUDS nanobot before 0.3.0 Server-Side Request Forgery…
|
HKUDS
|
nanobot
|
2026-09-16T21:46:45.613Z |
2026-09-17T13:32:06.815Z |
|
cve-2026-89034
|
7.1 (v4.0)
6.5 (v3.1)
|
TCH QRing R20_B006 Unauthenticated BLE Access
|
TCH
|
QRing
|
2026-09-16T21:43:14.047Z |
2026-09-19T02:00:13.386Z |
|
cve-2026-64684
|
|
RMCP: Custom HTTP headers leak to cross-origin redirec…
|
modelcontextprotocol
|
rust-sdk
|
2026-09-16T21:18:48.886Z |
2026-09-19T01:56:51.763Z |
|
cve-2026-85469
|
8 (v3.1)
|
Quay-builder-qemu: quay-builder-qemu: release workflow…
|
Red Hat
|
Red Hat Quay 3
|
2026-09-16T21:02:29.885Z |
2026-10-07T18:22:29.443Z |
|
cve-2026-62997
|
|
Kedro-Datasets: Remote code execution in experimental …
|
kedro-org
|
kedro-plugins
|
2026-09-16T20:48:44.536Z |
2026-09-17T14:55:22.149Z |
|
cve-2026-75513
|
|
Marten: SQL injection in Marten's LINQ provider via un…
|
JasperFx
|
marten
|
2026-09-16T20:46:17.189Z |
2026-09-19T01:55:24.743Z |
|
cve-2026-81871
|
|
OpenTelemetry-Go: Log gRPC exporter ignores env TLS ce…
|
open-telemetry
|
opentelemetry-go
|
2026-09-16T20:43:40.119Z |
2026-09-17T19:24:00.081Z |
|
cve-2026-81872
|
|
OpenTelemetry-Go: BatchProcessor can busy-spin when ex…
|
open-telemetry
|
opentelemetry-go
|
2026-09-16T20:42:23.507Z |
2026-09-17T13:36:27.289Z |
|
cve-2026-81869
|
|
OpenTelemetry-Go: UTF-8 replacement rune bypasses attr…
|
open-telemetry
|
opentelemetry-go
|
2026-09-16T20:41:15.806Z |
2026-09-17T14:15:51.501Z |
|
cve-2026-92816
|
8.5 (v4.0)
7.8 (v3.1)
|
ComfyUI before 0.30.0 Path Traversal via dataset save nodes
|
Comfy-Org
|
ComfyUI
|
2026-09-16T20:33:01.106Z |
2026-09-21T15:52:19.521Z |