|
cve-2025-66275
|
7.7 (v4.0)
|
Remote code execution via command injection
|
QNAP Systems Inc.
|
Video Station
|
2026-10-15T06:58:02.780Z |
2026-10-15T18:34:15.469Z |
|
cve-2026-109689
|
5.3 (v3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken…
|
WP Sunshine
|
Sunshine Photo Cart
|
2026-10-15T18:14:39.051Z |
2026-10-15T18:33:26.965Z |
|
cve-2025-68403
|
4.6 (v4.0)
|
Inadequate Steps to Confirm Vulnerability in QuRouter
|
QNAP Systems Inc.
|
QuRouter
|
2026-10-15T06:58:16.820Z |
2026-10-15T18:32:58.755Z |
|
cve-2026-100350
|
|
kin-openapi deepObject query decoding repeatedly compi…
|
getkin
|
kin-openapi
|
2026-10-15T15:37:19.077Z |
2026-10-15T18:32:57.402Z |
|
cve-2025-68404
|
7.5 (v4.0)
|
vcs_pentest Race Condition Authentication Bypass Vulne…
|
QNAP Systems Inc.
|
QuRouter
|
2026-10-15T06:58:27.256Z |
2026-10-15T18:32:25.154Z |
|
cve-2026-110374
|
4.3 (v3.1)
|
WordPress Login with phone number plugin <= 1.8.77 - B…
|
Hamid Alinia
|
Login with phone number
|
2026-10-15T18:18:13.194Z |
2026-10-15T18:32:12.140Z |
|
cve-2026-100354
|
|
kin-openapi: Uncontrolled Recursion on Circular allOf/…
|
getkin
|
kin-openapi
|
2026-10-15T16:02:00.566Z |
2026-10-15T18:31:51.798Z |
|
cve-2026-61838
|
|
Lychee: Album password bypass in ZIP downloads
|
LycheeOrg
|
Lychee
|
2026-10-15T16:32:37.392Z |
2026-10-15T18:31:13.925Z |
|
cve-2026-106163
|
6.5 (v3.1)
|
Cross-site Scripting (XSS) in Kendo UI for jQuery File…
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:18:53.367Z |
2026-10-15T18:30:45.142Z |
|
cve-2026-106162
|
4.7 (v3.1)
|
Cross-Site Scripting in FileManager Drag Hints in Kend…
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:20:11.331Z |
2026-10-15T18:30:23.198Z |
|
cve-2026-77470
|
|
Lychee: Webshop checkout lets the client override the …
|
LycheeOrg
|
Lychee
|
2026-10-15T16:36:09.597Z |
2026-10-15T18:30:17.464Z |
|
cve-2026-106157
|
4.7 (v3.1)
|
Cross-Site Scripting via PanelBar Item URLs in Kendo U…
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:21:27.532Z |
2026-10-15T18:29:35.947Z |
|
cve-2026-106158
|
4.7 (v3.1)
|
Cross-Site Scripting via Scheduler Resource Colors in …
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:22:44.197Z |
2026-10-15T18:29:15.316Z |
|
cve-2026-105271
|
4.3 (v3.0)
5.1 (v4.0)
|
"ゲオアプリ" provided by GEO CORPORATION contains an i…
|
GEO CORPORATION
|
"ゲオアプリ" for Android
|
2026-10-15T08:24:18.191Z |
2026-10-15T18:28:26.549Z |
|
cve-2026-55246
|
|
bincookie: Heap buffer overflow via unvalidated `num_p…
|
Tatsh
|
bincookie
|
2026-10-15T17:06:59.783Z |
2026-10-15T18:27:40.897Z |
|
cve-2026-24715
|
5.3 (v4.0)
|
Lack of Reproducible Vulnerability Evidence in QNAP Report
|
QNAP Systems Inc.
|
QuRouter
|
2026-10-15T06:58:49.678Z |
2026-10-15T18:27:22.934Z |
|
cve-2026-102740
|
|
AsyncHttpClient: Resumable download index store is cre…
|
AsyncHttpClient
|
async-http-client
|
2026-10-15T17:25:30.183Z |
2026-10-15T18:27:00.104Z |
|
cve-2026-106159
|
4.7 (v3.1)
|
Cross-Site Scripting via ToolBar ButtonGroup URLs in K…
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:23:40.132Z |
2026-10-15T18:26:53.924Z |
|
cve-2026-106160
|
5.4 (v3.1)
|
Prototype Pollution via Model.accept and kendo.setter …
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:24:33.068Z |
2026-10-15T18:26:30.515Z |
|
cve-2026-55414
|
|
NL Portal Backend Libraries: Unauthenticated form reso…
|
nl-portal
|
nl-portal-backend-libraries
|
2026-10-15T17:33:04.629Z |
2026-10-15T18:26:10.056Z |
|
cve-2026-106161
|
5.4 (v3.1)
|
Cross-Site Scripting via Badge Text Binding in Kendo U…
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T13:26:57.635Z |
2026-10-15T18:25:52.553Z |
|
cve-2026-22896
|
6.2 (v4.0)
|
Stored XSS via Interface Name in Network & Virtual Swi…
|
QNAP Systems Inc.
|
Network & Virtual Switch
|
2026-10-15T06:58:38.222Z |
2026-10-15T18:25:22.923Z |
|
cve-2026-110367
|
5.3 (v3.1)
|
WordPress APIExperts Square for WooCommerce plugin <= …
|
WPExperts
|
APIExperts Square for WooCommerce
|
2026-10-15T17:45:13.071Z |
2026-10-15T18:24:51.313Z |
|
cve-2026-106153
|
5.4 (v3.1)
|
Cross-site Scripting (XSS) in Kendo UI for jQuery Cale…
|
Progress Software
|
Kendo UI for jQuery
|
2026-10-15T14:12:05.941Z |
2026-10-15T18:24:48.793Z |
|
cve-2026-103350
|
5.3 (v3.1)
|
WordPress Booking and Rental Manager plugin <= 2.8.0 -…
|
Magepeople inc.
|
Booking and Rental Manager
|
2026-10-15T17:47:33.578Z |
2026-10-15T18:24:28.555Z |
|
cve-2026-110890
|
6.5 (v3.1)
|
WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site…
|
Crocoblock
|
JetSmartFilters
|
2026-10-15T17:45:58.863Z |
2026-10-15T18:24:23.069Z |
|
cve-2026-106139
|
5.4 (v3.1)
|
Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
|
Progress Software
|
Kendo UI for Vue
|
2026-10-10T09:23:48.755Z |
2026-10-15T18:18:16.714Z |
|
cve-2026-110840
|
7 (v4.0)
|
n8n before 2.41.4 and 2.42.1 SQL Injection via Microso…
|
n8n-io
|
n8n
|
2026-10-14T22:52:15.513Z |
2026-10-15T18:18:14.437Z |
|
cve-2026-106138
|
5.4 (v3.1)
|
Cross-Site Scripting via Chart Tooltip in KendoReact
|
Progress Software
|
KendoReact
|
2026-10-10T09:23:05.665Z |
2026-10-15T18:17:56.079Z |
|
cve-2026-101947
|
8.4 (v4.0)
|
ExifTool for photo and video 5.0.1 - Local OS command …
|
CellHubs
|
ExifTool for photo and video
|
2026-10-10T03:06:42.581Z |
2026-10-15T18:17:26.346Z |