|
cve-2026-111593
|
N/A
|
{'providerMetadata': {'orgId': '1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81', 'shortName': 'WPScan', 'dateUpdated': '2026-10-16T13:43:18.510Z'}, 'rejectedReasons': [{'lang': 'en', 'value': "This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role that could invoke the bulk invoice deletion and renumbering tool already holds the equivalent capability through the plugin's normal per-order invoice controls and through WooCommerce order management, so it crosses no privilege boundary. No CVE record should reference this ID."}]}
|
N/A
|
N/A
|
|
2026-10-16T13:43:18.510Z |
|
cve-2026-111413
|
8.8 (v3.1)
|
WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cro…
|
aThemeArt
|
aThemeArt Theme Helper
|
2026-10-16T13:02:14.161Z |
2026-10-16T13:32:40.971Z |
|
cve-2026-109119
|
8.8 (v3.1)
|
Missing Authorization in rdiffweb
|
ikus-soft
|
rdiffweb
|
2026-10-16T10:27:28.149Z |
2026-10-16T13:31:33.847Z |
|
cve-2026-108798
|
|
ZKTeco BioTime hard-coded key
|
ZKTeco
|
BioTime
|
2026-10-12T04:00:12.485Z |
2026-10-16T12:45:54.553Z |
|
cve-2026-108797
|
|
ZKTeco BioTime Employee REST API employees authorization
|
ZKTeco
|
BioTime
|
2026-10-12T03:45:09.489Z |
2026-10-16T12:45:50.379Z |
|
cve-2026-108796
|
|
ZKTeco BioTime Biometric Data Endpoint finger_data aut…
|
ZKTeco
|
BioTime
|
2026-10-12T03:30:15.059Z |
2026-10-16T12:45:46.274Z |
|
cve-2026-108795
|
|
ZKTeco BioTime System Settings API systemSettings acce…
|
ZKTeco
|
BioTime
|
2026-10-12T03:15:11.391Z |
2026-10-16T12:45:42.116Z |
|
cve-2026-108794
|
|
ZKTeco BioTime Database Migration Functionality db_mig…
|
ZKTeco
|
BioTime
|
2026-10-12T03:00:08.022Z |
2026-10-16T12:45:37.927Z |
|
cve-2026-111444
|
9.8 (v3.1)
|
Wheels through 4.1.2 allows SQL injection on MySQ…
|
Wheels
|
Wheels
|
2026-10-16T03:31:30.485Z |
2026-10-16T12:32:27.499Z |
|
cve-2026-111449
|
5.9 (v3.1)
|
Wheels 3.0.0 through 4.1.1 can disclose detailed …
|
Wheels
|
Wheels
|
2026-10-16T03:44:11.707Z |
2026-10-16T12:31:28.907Z |
|
cve-2026-111458
|
6.8 (v4.0)
|
ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprin…
|
adulau
|
ssldump
|
2026-10-16T05:24:43.178Z |
2026-10-16T12:30:53.251Z |
|
cve-2026-96659
|
9.1 (v3.1)
|
Foreman: excessive permissions for viewer role on preview
|
Red Hat
|
Red Hat Satellite 6.16 for RHEL 8
|
2026-10-01T16:23:23.666Z |
2026-10-16T12:18:17.723Z |
|
cve-2026-19541
|
6.5 (v3.1)
|
Outgoing OAuth connection client secret exposure durin…
|
Mattermost
|
Mattermost
|
2026-10-16T06:54:57.403Z |
2026-10-16T12:03:18.956Z |
|
cve-2026-19600
|
4.5 (v3.1)
|
Mattermost logs plaintext authentication tokens in deb…
|
Mattermost
|
Mattermost
|
2026-10-16T07:07:17.899Z |
2026-10-16T12:02:51.761Z |
|
cve-2026-19601
|
4.9 (v3.1)
|
Disclosure of AD/LDAP bind password via Test Connection
|
Mattermost
|
Mattermost
|
2026-10-16T06:58:33.116Z |
2026-10-16T12:00:43.806Z |
|
cve-2026-19867
|
4.3 (v3.1)
|
Uncapped mention keys in user notification properties …
|
Mattermost
|
Mattermost
|
2026-10-16T07:00:12.550Z |
2026-10-16T12:00:11.330Z |
|
cve-2026-18795
|
6.4 (v3.1)
|
Missing server side validation allowed user to quarant…
|
Mattermost
|
Mattermost
|
2026-10-16T07:01:22.549Z |
2026-10-16T11:59:42.771Z |
|
cve-2026-19603
|
4.3 (v3.1)
|
Private channel ID disclosure via user status endpoints
|
Mattermost
|
Mattermost
|
2026-10-16T07:02:38.486Z |
2026-10-16T11:59:09.985Z |
|
cve-2026-19621
|
6.5 (v3.1)
|
Mattermost leaks interactive-message integration secre…
|
Mattermost
|
Mattermost
|
2026-10-16T07:06:00.580Z |
2026-10-16T11:58:36.743Z |
|
cve-2026-18256
|
4.3 (v3.1)
|
Private team metadata disclosure via the team search API
|
Mattermost
|
Mattermost
|
2026-10-16T07:13:43.684Z |
2026-10-16T11:58:08.912Z |
|
cve-2026-16251
|
6.5 (v3.1)
|
Mattermost local image proxy allows server memory exha…
|
Mattermost
|
Mattermost
|
2026-10-16T07:14:59.296Z |
2026-10-16T11:57:33.968Z |
|
cve-2026-84713
|
6.5 (v3.1)
|
Automation-controller: automation-controller: notifica…
|
Red Hat
|
Red Hat Ansible Automation Platform 2.7
|
2026-09-23T19:40:26.061Z |
2026-10-16T11:55:09.585Z |
|
cve-2026-80158
|
5.5 (v3.1)
|
Ansible-collection-community-general: community.genera…
|
Red Hat
|
Red Hat Ceph Storage 5
|
2026-08-26T22:06:07.301Z |
2026-10-16T11:54:39.335Z |
|
cve-2026-71461
|
4.3 (v3.1)
|
Automation-controller: automation-controller-container…
|
Red Hat
|
Red Hat Ansible Automation Platform 2.7
|
2026-09-23T18:25:16.105Z |
2026-10-16T11:54:10.056Z |
|
cve-2026-76648
|
8.5 (v3.1)
|
Automation-controller: automation-controller-container…
|
Red Hat
|
Red Hat Ansible Automation Platform 2.7
|
2026-09-23T18:24:44.006Z |
2026-10-16T11:51:09.848Z |
|
cve-2024-8008
|
5.2 (v3.1)
|
Reflected Cross-Site Scripting (XSS) in Multiple WSO2 …
|
WSO2
|
WSO2 Enterprise Integrator
|
2025-06-02T16:48:12.479Z |
2026-10-16T11:39:49.442Z |
|
cve-2026-110594
|
6.9 (v4.0)
4.9 (v3.1)
|
BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing R…
|
MicroPyramid
|
BottleCRM
|
2026-10-14T14:16:38.449Z |
2026-10-16T11:39:00.692Z |
|
cve-2026-110593
|
5.3 (v4.0)
5.4 (v3.1)
|
BottleCRM through 1.14.5 Server-Side Template Injectio…
|
MicroPyramid
|
BottleCRM
|
2026-10-14T14:16:37.842Z |
2026-10-16T11:38:59.795Z |
|
cve-2026-110592
|
5.1 (v4.0)
3.5 (v3.1)
|
BottleCRM 0.30 through 1.14.5 HTML Injection via Custo…
|
MicroPyramid
|
BottleCRM
|
2026-10-14T14:16:37.199Z |
2026-10-16T11:38:58.882Z |
|
cve-2026-107635
|
6.9 (v4.0)
6.1 (v3.1)
|
Dislocker through 0.7.3 Out-of-Bounds Heap Read via VM…
|
Aorimn
|
dislocker
|
2026-10-08T14:10:33.744Z |
2026-10-16T11:38:58.060Z |