|
cve-2026-76648
|
8.5 (v3.1)
|
Automation-controller: automation-controller-container…
|
Red Hat
|
Red Hat Ansible Automation Platform 2.7
|
2026-09-23T18:24:44.006Z |
2026-10-16T11:51:09.848Z |
|
cve-2024-8008
|
5.2 (v3.1)
|
Reflected Cross-Site Scripting (XSS) in Multiple WSO2 …
|
WSO2
|
WSO2 Enterprise Integrator
|
2025-06-02T16:48:12.479Z |
2026-10-16T11:39:49.442Z |
|
cve-2026-110594
|
6.9 (v4.0)
4.9 (v3.1)
|
BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing R…
|
MicroPyramid
|
BottleCRM
|
2026-10-14T14:16:38.449Z |
2026-10-16T11:39:00.692Z |
|
cve-2026-110593
|
5.3 (v4.0)
5.4 (v3.1)
|
BottleCRM through 1.14.5 Server-Side Template Injectio…
|
MicroPyramid
|
BottleCRM
|
2026-10-14T14:16:37.842Z |
2026-10-16T11:38:59.795Z |
|
cve-2026-110592
|
5.1 (v4.0)
3.5 (v3.1)
|
BottleCRM 0.30 through 1.14.5 HTML Injection via Custo…
|
MicroPyramid
|
BottleCRM
|
2026-10-14T14:16:37.199Z |
2026-10-16T11:38:58.882Z |
|
cve-2026-107635
|
6.9 (v4.0)
6.1 (v3.1)
|
Dislocker through 0.7.3 Out-of-Bounds Heap Read via VM…
|
Aorimn
|
dislocker
|
2026-10-08T14:10:33.744Z |
2026-10-16T11:38:58.060Z |
|
cve-2026-108749
|
N/A
|
{'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-16T11:32:14.374Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}}
|
N/A
|
N/A
|
2026-10-11T12:19:49.965Z |
2026-10-16T11:32:14.374Z |
|
cve-2026-18799
|
4.3 (v3.1)
|
Mattermost Server fails to restrict Slack import accou…
|
Mattermost
|
Mattermost
|
2026-10-16T07:16:19.062Z |
2026-10-16T11:28:45.200Z |
|
cve-2026-14177
|
7.5 (v3.1)
|
User Enumeration via Password Reset in IKAS Technology…
|
IKAS Technology Inc.
|
ikas E-Commerce Infrastructure
|
2026-10-16T08:13:48.769Z |
2026-10-16T11:24:42.998Z |
|
cve-2026-111472
|
9.3 (v4.0)
|
SQL injection in TSG Profleet
|
TSG
|
Profleet
|
2026-10-16T08:37:34.959Z |
2026-10-16T11:23:16.889Z |
|
cve-2026-15219
|
6.5 (v3.1)
|
IDOR in SFM Software's Costifier
|
SFM Software Technologies Inc.
|
Costifier
|
2026-10-16T08:42:32.579Z |
2026-10-16T11:22:24.068Z |
|
cve-2026-27433
|
6.5 (v3.1)
|
WordPress Motors theme < 5.6.85 - Broken Access Contro…
|
StylemixThemes
|
Motors
|
2026-07-02T11:14:59.997Z |
2026-10-16T11:21:43.949Z |
|
cve-2026-15575
|
5.3 (v3.1)
|
Sensitive Information Disclosure Due to Enabled Debug …
|
SFM Software Technologies Inc.
|
Costifier
|
2026-10-16T08:45:41.731Z |
2026-10-16T11:21:41.333Z |
|
cve-2026-101300
|
7.1 (v4.0)
|
Server-Side Request Forgery in Wegow PDF export
|
Wegow Technologies
|
Wegow
|
2026-10-16T08:56:02.923Z |
2026-10-16T11:19:56.435Z |
|
cve-2024-0858
|
N/A
|
Innovs HR < 1.0.3.7.1 - Employee Creation via CSRF
|
Unknown
|
Innovs HR
|
2024-03-18T19:05:49.195Z |
2026-10-16T11:08:02.758Z |
|
cve-2026-18807
|
N/A
|
ECS < 4.3.13 - Contributor+ Arbitrary Post Binding and…
|
Unknown
|
ECS
|
2026-08-15T06:00:15.159Z |
2026-10-16T11:08:02.129Z |
|
cve-2026-106030
|
6.8 (v4.0)
|
Missing Authorization in NordVPN for Windows
|
Nord Security
|
NordVPN
|
2026-10-16T09:47:20.977Z |
2026-10-16T10:40:51.408Z |
|
cve-2026-14452
|
|
Open redirect and XSS via reset_url parameter
|
Checkmk GmbH
|
Checkmk
|
2026-10-16T09:51:30.453Z |
2026-10-16T10:40:17.160Z |
|
cve-2026-96339
|
7.1 (v3.1)
|
WordPress Houzez theme <= 4.4.0 - Cross Site Scripting…
|
Houzez.co
|
Houzez
|
2026-10-16T07:00:37.525Z |
2026-10-16T10:36:08.361Z |
|
cve-2025-61662
|
7.8 (v3.1)
|
Grub2: missing unregister call for gettext command may…
|
GNU
|
grub2
|
2025-11-18T18:20:48.351Z |
2026-10-16T10:08:21.077Z |
|
cve-2026-104396
|
6.5 (v3.1)
|
WordPress Name Directory plugin <= 1.34.2 - Cross Site…
|
Jeroen Peters
|
Name Directory
|
2026-10-05T08:51:37.187Z |
2026-10-16T07:13:51.113Z |
|
cve-2026-89603
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}], 'providerMetadata': {'orgId': '416baaa9-dc9f-4396-8d5f-8c081fb06d67', 'shortName': 'Linux', 'dateUpdated': '2026-10-16T06:29:42.006Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-09-11T19:45:06.613Z |
2026-10-16T06:29:42.006Z |
|
cve-2026-19746
|
|
Calix GigaSpire traceroute.cmd denial of service
|
Calix
|
GigaSpire
|
2026-08-13T19:15:07.554Z |
2026-10-16T06:04:51.525Z |
|
cve-2026-19745
|
|
Calix GigaSpire Web Management utilities_configuration…
|
Calix
|
GigaSpire
|
2026-08-13T19:00:08.612Z |
2026-10-16T06:04:47.985Z |
|
cve-2026-110913
|
N/A
|
Memory corruption in DOM in Google Chrome prior t…
|
Google
|
Chrome
|
2026-10-15T22:04:17.437Z |
2026-10-16T03:57:23.600Z |
|
cve-2026-110914
|
N/A
|
Memory corruption in Workers in Google Chrome pri…
|
Google
|
Chrome
|
2026-10-15T22:04:19.515Z |
2026-10-16T03:57:22.914Z |
|
cve-2026-110915
|
N/A
|
Use after free in Compositing in Google Chrome pr…
|
Google
|
Chrome
|
2026-10-15T22:04:19.283Z |
2026-10-16T03:57:22.217Z |
|
cve-2026-110920
|
N/A
|
Memory corruption in V8 in Google Chrome prior to…
|
Google
|
Chrome
|
2026-10-15T22:04:18.838Z |
2026-10-16T03:57:21.534Z |
|
cve-2026-110921
|
N/A
|
Use after free in V8 in Google Chrome prior to 15…
|
Google
|
Chrome
|
2026-10-15T22:04:18.618Z |
2026-10-16T03:57:20.795Z |
|
cve-2026-110919
|
N/A
|
Use after free in V8 in Google Chrome prior to 15…
|
Google
|
Chrome
|
2026-10-15T22:04:17.867Z |
2026-10-16T03:57:20.114Z |