|
cve-2026-57486
|
|
pupnp: NULL pointer dereference in ixmlNode_compare cr…
|
pupnp
|
pupnp
|
2026-10-16T15:32:57.234Z |
2026-10-16T15:56:47.362Z |
|
cve-2026-87765
|
5.5 (v3.1)
|
Improper Input Validation in Kernel APsys DVFS
|
Unisoc (Shanghai) Technologies Co., Ltd.
|
kernel
|
2026-10-12T01:28:25.514Z |
2026-10-16T15:56:38.839Z |
|
cve-2026-111358
|
5.3 (v4.0)
5.4 (v3.1)
|
SendPortal sendportal-core through 4.0.1 Cross-Workspa…
|
mettle
|
sendportal-core
|
2026-10-15T21:43:46.335Z |
2026-10-16T15:55:23.157Z |
|
cve-2026-108978
|
5.5 (v3.1)
|
Heap-based buffer overflow vulnerability in Samsu…
|
Samsung Opensource
|
rlottie
|
2026-10-11T21:31:24.126Z |
2026-10-16T15:54:16.765Z |
|
cve-2026-111366
|
8.6 (v4.0)
7.2 (v3.1)
|
cool-admin-midway through 8.0.0 Authorization Bypass v…
|
cool-team-official
|
cool-admin-midway
|
2026-10-15T21:43:49.835Z |
2026-10-16T15:53:26.458Z |
|
cve-2026-108925
|
6.1 (v3.1)
|
Cohesity - CWE-80: Improper Neutralization of Script-R…
|
Cohesity
|
NetBackup Administration Console web interface
|
2026-10-11T18:11:27.584Z |
2026-10-16T15:53:19.684Z |
|
cve-2026-107746
|
|
FunnelKit <= 3.16.0.6 - Missing Authorization to Unaut…
|
teamfunnelkit
|
FunnelKit – Funnel Builder Plugin for WooCommerce Checkout
|
2026-10-16T04:27:03.447Z |
2026-10-16T15:53:00.052Z |
|
cve-2026-59508
|
5.9 (v3.1)
|
Interuse i-Bos CWE-89: Improper Neutralization of Spec…
|
Interuse
|
i-Bos
|
2026-10-11T17:51:21.655Z |
2026-10-16T15:52:27.018Z |
|
cve-2026-103480
|
|
Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored…
|
themefic
|
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
|
2026-10-16T05:30:20.709Z |
2026-10-16T15:48:35.785Z |
|
cve-2026-109400
|
|
InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber…
|
instawp
|
InstaWP Connect – 1-click WP Staging & Migration
|
2026-10-16T04:27:01.115Z |
2026-10-16T15:46:59.318Z |
|
cve-2026-19737
|
5.5 (v3.1)
|
NULL pointer dereference in the ESP32 I2S driver when …
|
zephyrproject
|
zephyr
|
2026-10-11T17:15:01.878Z |
2026-10-16T15:46:16.400Z |
|
cve-2026-103895
|
|
miniOrange OTP Login, Verification and SMS Notificatio…
|
cyberlord92
|
miniOrange OTP Login, Verification and SMS Notifications
|
2026-10-16T04:26:59.302Z |
2026-10-16T15:45:41.000Z |
|
cve-2026-104000
|
|
Simply Schedule Appointments <= 1.6.12.35 - Unauthenti…
|
croixhaug
|
Simply Schedule Appointments
|
2026-10-16T05:30:21.082Z |
2026-10-16T15:45:05.671Z |
|
cve-2026-93767
|
|
Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path T…
|
tainacan
|
Tainacan
|
2026-10-16T05:30:22.312Z |
2026-10-16T15:44:36.511Z |
|
cve-2013-10076
|
N/A
|
ExtUtils::Typemaps::STL::Vector versions before 1.05 f…
|
|
|
2026-10-10T12:44:48.076Z |
2026-10-16T15:42:48.709Z |
|
cve-2026-107373
|
N/A
|
ExtUtils::Typemaps::STL::String versions before 1.06 f…
|
|
|
2026-10-10T12:44:08.099Z |
2026-10-16T15:39:45.111Z |
|
cve-2026-103636
|
|
Apache DataSketches: datasketches-cpp: Out-of-bounds r…
|
Apache Software Foundation
|
Apache DataSketches
|
2026-10-10T10:23:58.547Z |
2026-10-16T15:32:00.167Z |
|
cve-2026-75120
|
9.3 (v4.0)
|
Remote Code Execution (RCE) vulnerability identified i…
|
OpenText
|
Endpoint Investigator
|
2026-10-13T18:02:10.450Z |
2026-10-16T15:31:55.620Z |
|
cve-2026-78633
|
|
Denial of Service in Okta RADIUS Agent Packet Parser
|
Okta
|
Okta RADIUS Agent
|
2026-10-13T20:08:40.528Z |
2026-10-16T15:31:55.280Z |
|
cve-2026-85473
|
|
Out-of-Range Timestamp Claim Handling in auth0/java-jwt
|
Auth0
|
java-jwt
|
2026-10-13T20:08:56.332Z |
2026-10-16T15:31:55.100Z |
|
cve-2026-94453
|
7.5 (v3.1)
|
IKEv2 Use-After-Free bug when using IKE-over-TCP
|
The Libreswan Project
|
libreswan
|
2026-10-13T21:27:43.376Z |
2026-10-16T15:31:54.755Z |
|
cve-2026-77205
|
3.7 (v3.1)
|
Denial of Service via sending bogus X.509 certificates
|
The Libreswan Project
|
libreswan
|
2026-10-13T21:28:03.390Z |
2026-10-16T15:31:54.457Z |
|
cve-2026-77206
|
7.5 (v3.1)
|
IKEv2 pre-authentication Null Pointer Dereference in E…
|
The Libreswan Project
|
libreswan
|
2026-10-13T21:28:11.498Z |
2026-10-16T15:31:54.304Z |
|
cve-2026-77207
|
7.5 (v3.1)
|
Null Pointer Dereference in PKCS#7 bundle with no cert…
|
The Libreswan Project
|
libreswan
|
2026-10-13T21:28:19.219Z |
2026-10-16T15:31:53.986Z |
|
cve-2026-110444
|
8.6 (v4.0)
8.8 (v3.1)
|
TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection
|
TEAMPLUS TECHNOLOGY
|
TeamPlus Messenger
|
2026-10-14T02:56:55.404Z |
2026-10-16T15:31:53.810Z |
|
cve-2026-110445
|
8.6 (v4.0)
8.8 (v3.1)
|
TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection
|
TEAMPLUS TECHNOLOGY
|
TeamPlus Messenger
|
2026-10-14T02:57:49.074Z |
2026-10-16T15:31:53.506Z |
|
cve-2026-105429
|
8.9 (v4.0)
8 (v3.1)
|
NetBird client SSH config Match line injection via pee…
|
NetBird
|
NetBird
|
2026-10-14T04:33:44.856Z |
2026-10-16T15:31:53.347Z |
|
cve-2026-110467
|
5.3 (v4.0)
4.3 (v3.1)
|
WisdomGarden｜Tronclass - Insecure Direct Object Reference
|
WisdomGarden
|
Tronclass
|
2026-10-14T06:31:24.977Z |
2026-10-16T15:31:52.878Z |
|
cve-2026-84471
|
7.2 (v4.0)
|
The fix for CVE-2026-12996 was incomplete. A use-…
|
OpenVPN
|
OpenVPN
|
2026-10-14T14:29:04.851Z |
2026-10-16T15:31:52.556Z |
|
cve-2026-89069
|
8 (v3.1)
|
MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages
|
Progress
|
MOVEit Transfer
|
2026-10-14T15:07:00.959Z |
2026-10-16T15:31:52.383Z |