|
cve-2026-92580
|
8.7 (v4.0)
8.8 (v3.1)
|
AVideo through 29.0 CloneSite Stored Shell Injection v…
|
WWBN
|
AVideo
|
2026-09-16T21:46:48.648Z |
2026-09-19T02:01:45.439Z |
|
cve-2026-92579
|
5.3 (v4.0)
5.4 (v3.1)
|
AVideo through 29.0 Broken Access Control via CSRF Exe…
|
WWBN
|
AVideo
|
2026-09-16T21:46:47.891Z |
2026-09-18T20:13:56.256Z |
|
cve-2026-92578
|
9.2 (v4.0)
8.1 (v3.1)
|
WWBN AVideo through 29.0 Authentication Bypass via Sto…
|
WWBN
|
AVideo
|
2026-09-16T21:46:47.151Z |
2026-09-17T14:52:56.526Z |
|
cve-2026-92577
|
8.7 (v4.0)
7.5 (v3.1)
|
AVideo through 29.0 API get_api_video Broken Access Co…
|
WWBN
|
AVideo
|
2026-09-16T21:46:46.351Z |
2026-09-17T19:23:51.702Z |
|
cve-2026-92576
|
9.2 (v4.0)
8.6 (v3.1)
|
HKUDS nanobot before 0.3.0 Server-Side Request Forgery…
|
HKUDS
|
nanobot
|
2026-09-16T21:46:45.613Z |
2026-09-17T13:32:06.815Z |
|
cve-2026-89034
|
7.1 (v4.0)
6.5 (v3.1)
|
TCH QRing R20_B006 Unauthenticated BLE Access
|
TCH
|
QRing
|
2026-09-16T21:43:14.047Z |
2026-09-19T02:00:13.386Z |
|
cve-2026-64684
|
|
RMCP: Custom HTTP headers leak to cross-origin redirec…
|
modelcontextprotocol
|
rust-sdk
|
2026-09-16T21:18:48.886Z |
2026-09-19T01:56:51.763Z |
|
cve-2026-85469
|
8 (v3.1)
|
Quay-builder-qemu: quay-builder-qemu: release workflow…
|
Red Hat
|
Red Hat Quay 3
|
2026-09-16T21:02:29.885Z |
2026-10-07T18:22:29.443Z |
|
cve-2026-62997
|
|
Kedro-Datasets: Remote code execution in experimental …
|
kedro-org
|
kedro-plugins
|
2026-09-16T20:48:44.536Z |
2026-09-17T14:55:22.149Z |
|
cve-2026-75513
|
|
Marten: SQL injection in Marten's LINQ provider via un…
|
JasperFx
|
marten
|
2026-09-16T20:46:17.189Z |
2026-09-19T01:55:24.743Z |
|
cve-2026-81871
|
|
OpenTelemetry-Go: Log gRPC exporter ignores env TLS ce…
|
open-telemetry
|
opentelemetry-go
|
2026-09-16T20:43:40.119Z |
2026-09-17T19:24:00.081Z |
|
cve-2026-81872
|
|
OpenTelemetry-Go: BatchProcessor can busy-spin when ex…
|
open-telemetry
|
opentelemetry-go
|
2026-09-16T20:42:23.507Z |
2026-09-17T13:36:27.289Z |
|
cve-2026-81869
|
|
OpenTelemetry-Go: UTF-8 replacement rune bypasses attr…
|
open-telemetry
|
opentelemetry-go
|
2026-09-16T20:41:15.806Z |
2026-09-17T14:15:51.501Z |
|
cve-2026-92816
|
8.5 (v4.0)
7.8 (v3.1)
|
ComfyUI before 0.30.0 Path Traversal via dataset save nodes
|
Comfy-Org
|
ComfyUI
|
2026-09-16T20:33:01.106Z |
2026-09-21T15:52:19.521Z |
|
cve-2026-92815
|
8.7 (v4.0)
7.5 (v3.1)
|
changedetection.io through 0.60.6 SSRF via browser-ste…
|
dgtlmoon
|
changedetection.io
|
2026-09-16T20:33:00.402Z |
2026-09-17T14:56:14.559Z |
|
cve-2026-92814
|
2.3 (v4.0)
4.2 (v3.1)
|
changedetection.io through 0.60.6 Cross-Site Scripting…
|
dgtlmoon
|
changedetection.io
|
2026-09-16T20:32:59.669Z |
2026-09-17T19:24:11.367Z |
|
cve-2026-92813
|
6.9 (v4.0)
4.9 (v3.1)
|
Metabase through 0.63.18 SSRF via GeoJSON URL validati…
|
metabase
|
Metabase
|
2026-09-16T20:32:58.969Z |
2026-09-17T13:42:23.657Z |
|
cve-2026-92812
|
9.3 (v4.0)
9.8 (v3.1)
|
Decap CMS < 3.11.0 Path Traversal via Sibling Director…
|
decaporg
|
decap-cms
|
2026-09-16T20:32:58.261Z |
2026-10-28T19:05:52.480Z |
|
cve-2026-92811
|
7.1 (v4.0)
6.5 (v3.1)
|
browserless 1.44.0 through 2.56.7 File Protocol Restri…
|
browserless
|
browserless
|
2026-09-16T20:32:57.539Z |
2026-09-21T15:40:14.058Z |
|
cve-2026-92810
|
5.3 (v4.0)
4.3 (v3.1)
|
PrestaShop blockwishlist through 3.0.2 Information Dis…
|
PrestaShop
|
blockwishlist
|
2026-09-16T20:32:56.823Z |
2026-09-17T14:56:49.832Z |
|
cve-2026-92809
|
5.3 (v4.0)
4.3 (v3.1)
|
PrestaShop psgdpr through 1.4.3 GDPR Log Forgery
|
PrestaShop
|
psgdpr
|
2026-09-16T20:32:56.067Z |
2026-11-03T14:30:18.422Z |
|
cve-2026-92806
|
7.2 (v4.0)
8.1 (v3.1)
|
phpList before 3.6.17 Cross-Site Request Forgery via m…
|
phpList
|
phpList
|
2026-09-16T20:32:55.350Z |
2026-09-17T13:43:54.421Z |
|
cve-2026-92805
|
9.3 (v4.0)
9.8 (v3.1)
|
UVdesk Community Skeleton through 1.1.8 Missing Authen…
|
uvdesk
|
community-skeleton
|
2026-09-16T20:32:54.622Z |
2026-09-19T01:52:49.216Z |
|
cve-2026-92804
|
7.1 (v4.0)
7.1 (v3.1)
|
Nango through 0.70.4 Server-Side Request Forgery via C…
|
NangoHQ
|
Nango
|
2026-09-16T20:32:53.949Z |
2026-09-21T14:52:18.844Z |
|
cve-2026-92803
|
6.9 (v4.0)
5.3 (v3.1)
|
LibreTranslate through 1.9.6 Missing Access Check on t…
|
LibreTranslate
|
LibreTranslate
|
2026-09-16T20:32:53.271Z |
2026-09-17T14:59:25.192Z |
|
cve-2026-92802
|
5.3 (v4.0)
4.3 (v3.1)
|
kan through 0.6.0 Authorization Bypass via GitHub Proj…
|
kanbn
|
kan
|
2026-09-16T20:32:52.568Z |
2026-09-17T19:24:28.162Z |
|
cve-2026-92801
|
8.7 (v4.0)
8.8 (v3.1)
|
cc-connect through 1.5.0 User Allowlist Bypass via Fei…
|
chenhg5
|
cc-connect
|
2026-09-16T20:32:51.850Z |
2026-09-17T13:45:21.088Z |
|
cve-2026-92800
|
7.6 (v4.0)
6.8 (v3.1)
|
Docs before 5.4.1 Stale Collaboration Session After Ac…
|
suitenumerique
|
Docs
|
2026-09-16T20:32:51.118Z |
2026-09-19T01:48:05.151Z |
|
cve-2026-92796
|
8.7 (v4.0)
8.8 (v3.1)
|
Manticore Search 27.0.0 before 28.4.4 Multi-Statement …
|
manticoresoftware
|
Manticore Search
|
2026-09-16T20:32:50.419Z |
2026-09-21T15:43:07.203Z |
|
cve-2026-92795
|
7.1 (v4.0)
6.5 (v3.1)
|
Coze Studio through 0.5.1 Server-Side Request Forgery …
|
coze-dev
|
coze-studio
|
2026-09-16T20:32:49.712Z |
2026-09-17T15:04:55.507Z |