CVEs published October 5, 2026
413 CVEs were published on October 5, 2026: 33 critical, 122 high. 1 is now in CISA KEV.
- Published
- 413
- Critical
- 33
- High
- 122
- Medium
- 240
- Low
- 18
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 170
Most affected products
- makeplane plane
- 38
- MediaTek chipset
- 31
- Google Android
- 27
- TryGhost Ghost · ghost
- 20
- penpot
- 12
- moby BuildKit
- 10
- vllm-project vllm · vllm
- 9
- docling-project docling · docling-project docling-slim +2
- 8
- itsourcecode Online Admission System
- 8
- Mitel MiVoice Office
- 8
Critical 33
- CVE-2026-82989CVE-2026-82989Viewsonic vCast
- CVE-2026-105763Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQLtwentyhq twenty
- CVE-2026-21589This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, BaAtlassian Bamboo Data Center · Atlassian Bitbucket Data… +6
- CVE-2026-91107openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)OS4ED openSIS-Classic
- CVE-2026-105740Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverlangflow-ai langflow
- CVE-2026-77226Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource EndpointCamunda
- CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationlangflow-ai langflow · langflow-ai langflow-base +4
- CVE-2026-105691Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-colorpenpot
- CVE-2026-104711Apache Struts: OGNL injection in the legacy RESTful action mapperApache Software Foundation Apache Struts
- CVE-2026-105641Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypassmakeplane plane
- CVE-2026-105640Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)makeplane plane
- CVE-2026-105639Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Planemakeplane plane
- CVE-2026-105638Plane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute forcemakeplane plane
- CVE-2026-103352WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerabilityWP BASE Booking
- CVE-2026-97283WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerabilityLiquid Web / StellarWP Advanced Post Manager
- CVE-2026-105637Plane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)makeplane plane
- CVE-2026-105636Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)makeplane plane
- CVE-2026-102428Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16ordasoft.com OrdaSoft Joomla CCK
- CVE-2026-79820A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out…
- CVE-2026-105285Totolink A3002MU QoS Rule formIpQoS stack-based overflowTotolink A3002MU
- CVE-2026-105284Totolink A3002MU Authentication Check boa sub_40FCFC improper authorizationTotolink A3002MU
- CVE-2026-103510Authentication bypass via blank auth token in P4SearchPerforce P4
- CVE-2026-100102RCE via exposed JDWP debug agent in P4SearchPerforce P4
- CVE-2026-100103Authentication bypass via default auth token in P4SearchPerfoce P4
- CVE-2017-20285YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classesYAML
- CVE-2026-105294Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfigLegcord
- CVE-2026-105293Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC HandlersLegcord
- CVE-2026-105223maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verificationmaclof kubernetes-client
- CVE-2026-37719An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component.
- CVE-2026-88391Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar
- CVE-2026-88393WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export.
- CVE-2026-88395GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.
- CVE-2026-88424FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter().
High 122
- CVE-2026-105786Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifierlaurent22 joplin
- CVE-2026-82988CVE-2026-82988Viewsonic vCast
- CVE-2026-105783Joplin Web Clipper pairing allows cross-origin theft of a permanent API tokenlaurent22 joplin
- CVE-2026-105782Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddlewarescrapy
- CVE-2026-105764Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCEimmich-app immich
- CVE-2026-105762Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpointlanggenius dify
- CVE-2026-105761Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Serverslanggenius dify
- CVE-2026-104852GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`ardatan graphql-tools · @graphql-tools/utils
- CVE-2026-0461Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded AMD Zynq™ UltraScale+ MPSoCs · AMD Zynq™ UltraScale+ RFS… +1
- CVE-2026-105744Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic enginedocling-project docling · docling-project docling-slim +2
- CVE-2026-105741Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Writelangflow-ai langflow · langflow
- CVE-2026-105773Canimaan Software ClamXAV local privilege escalationCanimaan Software ClamXAV
- CVE-2026-105699Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlerslangflow-ai langflow · langflow
- CVE-2026-102262Newell Brands DYMO ID parent directory open to path traversal through improper spheres of controlNewell Brands DYMO ID
- CVE-2026-105679Ghost: Stored XSS via File Uploads on Local StorageTryGhost Ghost · ghost
- CVE-2026-94201Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ashash-project ash · ash
- CVE-2026-105677Ghost: Remote Code Execution via Theme Translation FilesTryGhost Ghost · ghost
- CVE-2026-105675Ghost: Invite Token Disclosure in Ghost Admin APITryGhost Ghost · ghost
- CVE-2026-105651Ghost: Stored XSS via Bookmark Card ImagesTryGhost Ghost · ghost
- CVE-2026-105650Ghost: Stored XSS via oEmbed Photo ResponsesTryGhost Ghost · ghost
- CVE-2026-105649Ghost: Stored XSS via SVG Uploads Bypassing SanitizationTryGhost Ghost · ghost
- CVE-2026-103066WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerabilityWP BASE Booking
- CVE-2026-100506WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerabilityWP Spell Check
- CVE-2026-100511WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerabilityVektor VK Google Job Posting Manager
- CVE-2026-97257WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerabilityPressTigers Simple Event Planner
- CVE-2026-93617WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerabilityWP Sunshine Sunshine Photo Cart
- CVE-2026-103348WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerabilitySmackcoders WP Ultimate Exporter
- CVE-2026-105643Ghost: Stored XSS via Embed Card PreviewsTryGhost Ghost · ghost
- CVE-2026-28648In Settings, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-28647In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-28641In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic eGoogle Android
- CVE-2026-28640In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input Google Android
- CVE-2026-28625In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-104714Apache Struts: Shared message formatter exposes date and time values across concurrent requestsApache Software Foundation Apache Struts
- CVE-2026-104712Apache Struts: Disproportionate response size when rendering BigDecimal request parametersApache Software Foundation Apache Struts
- CVE-2026-105642Ghost: Remote Code Execution via Bookmark Card ImagesTryGhost Ghost · ghost
- CVE-2026-58880In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition.Google Android
- CVE-2026-58865In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check.Google Android
- CVE-2026-58859In multiple places, there is a possible denial of service due to an uncaught exception.Google Android
- CVE-2026-58854In multiple locations, there is a possible memory corruption due to type confusion.Google Android
- CVE-2026-58841In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58835In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58815In multiple locations, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2026-55286In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2026-55280In multiple locations, there is a possible out-of-bounds write due to uninitialized data.Google Android
- CVE-2026-55270In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-55269In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation.Google Android
- CVE-2026-55266In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion.Google Android
- CVE-2026-49937In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2026-49933In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitiaGoogle Android
- CVE-2026-49885In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-49880In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-49878In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-45524In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check.Google Android
- CVE-2026-103349WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerabilityRymera Web Product Feed PRO for WooCommerce
- CVE-2026-97303WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerabilityApps Mav Scratch & Win – Giveaways and Contests
- CVE-2026-97309WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerabilityWebful Creations RepairBuddy
- CVE-2026-103334WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerabilityEtoile Web Design Incorporated Five Star Restaurant Reserva…
- CVE-2026-100515WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerabilityVillaTheme Photo Reviews for WooCommerce
- CVE-2026-105635Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Tokenmakeplane plane
- CVE-2026-105634Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Rolesmakeplane plane
- CVE-2026-105633Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scopemakeplane plane
- CVE-2026-105632Plane: Broken Access Control - joinProject GraphQL mutation allows self-join into private (secret) projectsmakeplane plane
- CVE-2026-105631Plane: asset download endpoints scope file lookups to the workspace (not the project / published entity) → cross-project & unauthenticated private-file disclosuremakeplane plane
- CVE-2026-105630Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)makeplane plane
- CVE-2026-105629Plane: Cross-Tenant Destructive IDOR: Estimate Point Deletion via Unscoped Primary Key Lookupmakeplane plane
- CVE-2026-105628Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpointmakeplane plane
- CVE-2026-104979Plane: Cross-tenant stored XSS in intake enables account takeovermakeplane plane
- CVE-2026-104978Plane: Invitation Hijack in Project Join Flow via Missing Authorization and Email-Only Acceptancemakeplane plane
- CVE-2026-104977Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOUmakeplane plane
- CVE-2026-104976Plane: SSRF in Gitea OAuthmakeplane plane
- CVE-2026-93318Cache poisoning via unvalidated image layer DiffIDsmoby BuildKit
- CVE-2026-104975Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpointsmakeplane plane
- CVE-2026-104974Plane: Disabled User Auto-Reactivation on Loginmakeplane plane
- CVE-2026-93316Starting daemon with --cdi-disabled flag can lead to panic on specific buildsmoby BuildKit
- CVE-2026-104973Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Deliverymakeplane plane
- CVE-2026-101919Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control planeRed Hat Multicluster Engine for Kubernetes
- CVE-2025-15643WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerabilityJose Fernandez Adsmonetizer
- CVE-2026-104971Plane: Cross-Workspace Asset Duplication IDOR + WorkspaceFileAssetEndpoint and FileAssetEndpoint Missing Authorizationmakeplane plane
- CVE-2026-102282adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationcthackers adm-zip · adm-zip
- CVE-2026-104970Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance adminsmakeplane plane
- CVE-2026-104968Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/makeplane plane
- CVE-2026-104966Plane: Cross-Workspace IDOR in Estimate and Comment Endpoints Allows Read, Modify, and Inject Across Workspacesmakeplane plane
- CVE-2026-12171auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRFcookpete auto-changelog
- CVE-2026-86671In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled Eclipse Foundation Eclipse Che
- CVE-2026-102775Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8phoca.cz Phoca Cart extension for Joomla
- CVE-2026-104892Plane: Plaintext logging of API tokenmakeplane plane
- CVE-2026-104891mppx-condition-gate: Free-access path grants on a self-declared wallet without proving controldouglasborthwick-crypto mppx-condition-gate · @insumermo… +3
- CVE-2026-104890Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code executionKunstmaanBundlesCMS · kunstmaan bundles-cms +3
- CVE-2026-92931CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDKProgress Software @progress/sitefinity-nextjs-sdk
- CVE-2026-77805Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® ClassicProgress Software Progress® Telerik® Fiddler® Classic
- CVE-2026-63277RCE via calcext:data-mappings, sql provider and jdbc connectorThe Document Foundation LibreOffice
- CVE-2026-104389WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerabilitySirv
- CVE-2026-104408WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerabilityGroundhogg
- CVE-2026-104407WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerabilityBlubrry Podcasting PowerPress Podcasting
- CVE-2026-104811Mitel MiVoice Office 400 Music on Hold WAV File Upload Code ExecutionMitel MiVoice Office
- CVE-2026-104810Mitel MiVoice Office 400 File Management File Browser path traversal vulnerabilityMitel MiVoice Office
- CVE-2026-104809Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code ExecutionMitel MiVoice Office
- CVE-2026-103507Arbitrary file-write via log configuration path in P4SearchPerforce P4
- CVE-2026-104805Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code ExecutionMitel MiVoice Office
- CVE-2026-104706Mitel MiVoice Office 400 view system files path traversalMitel MiVoice Office
- CVE-2026-19185Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user modezephyrproject zephyr
- CVE-2026-19184Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatchzephyrproject zephyr
- CVE-2026-105314Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call.Papermerge
- CVE-2019-25777YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code executionYAML
- CVE-2026-20531In apu, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20526In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20524In apu, there is a possible memory corruption due to improper input validation.MediaTek chipset
- CVE-2026-20523In neuropilot, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20522In neuropilot, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20521In Video HAL, there is a possible escalation of privilege due to a missing bounds check.MediaTek chipset
- CVE-2026-20586In vdec, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20520In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20519In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-105295GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS BypassGitAhead
- CVE-2026-78860An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext
- CVE-2026-78861An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key
- CVE-2026-88392Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local().
- CVE-2026-88394WookTeam v1.6.6 and before is vulnerable to a Directory Traversal.
- CVE-2026-88396ApiAdmin v5.0 and before is vulnerable to Directory Traversal.
- CVE-2026-95263Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control.
- CVE-2026-95265Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint.
Medium, low and unrated 258
- GHSA-2MJX-QC3C-RQVCRustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesrustls
- CVE-2026-105471girishsaraf Online-Appointment-Booking-System Registration signup.php sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-105785Joplin Server password reset accepts tokens issued for unrelated purposeslaurent22 joplin
- CVE-2026-105784Joplin whiteboard card rendering allows CSS injection into application chromelaurent22 joplin
- CVE-2026-105760vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustionvllm-project vllm · vllm
- CVE-2026-105759vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)vllm-project vllm · vllm
- CVE-2026-105758vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachvllm-project vllm · vllm
- CVE-2026-105757vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)vllm-project vllm · vllm
- CVE-2026-105756vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of servicevllm-project vllm · vllm
- CVE-2026-105755vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`vllm-project vllm · vllm
- CVE-2026-105754vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresvllm-project vllm · vllm
- CVE-2026-105753vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine corevllm-project vllm · vllm
- CVE-2026-105752vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oraclevllm-project vllm · vllm
- CVE-2026-105470girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-105469girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-93321Malformed LLB file operation can crash buildkitdmoby BuildKit
- CVE-2026-93315BuildKit proxy CA cleanup can be disrupted by build stepsmoby BuildKit
- CVE-2026-103433Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitionsDocker Buildx
- CVE-2026-103546Improper validation of Ops Manager configuration in MongoDB Kubernetes OperatorMongodb Controllers for Kubernetes
- CVE-2026-105468girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-105751Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backenddocling-project docling · docling
- CVE-2026-105750Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modedocling-project docling · docling-project docling-slim +2
- CVE-2026-105749Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustiondocling-project docling · docling-project docling-slim +2
- CVE-2026-0482In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafAMD Alveo™ Accelerator Cards · AMD Versal™ Prime Series… +6
- CVE-2026-105748Docling: Crafted DoclingDocument JSON embeds local image files into converted outputdocling-project docling · docling-project docling-slim +2
- CVE-2026-105747Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)docling-project docling · docling-project docling-slim +2
- CVE-2026-105746Docling: KServe v2 OCR engine does not enforce enable_remote_servicesdocling-project docling · docling-project docling-slim +1
- CVE-2026-105745Docling: Plugin entry points are imported before the allow_external_plugins checkdocling-project docling · docling-project docling-slim +2
- CVE-2026-105743Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)docling-project docling · docling-project docling-slim +2
- CVE-2026-105742Docling: Configured HTTP headers sent to every remote image host named by a documentdocling-project docling · docling-project docling-slim +2
- CVE-2026-105444dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injectiondotnet eShop
- CVE-2026-105438O2OA General url ActionUploadExcelWithUrl server-side request forgeryO2OA
- CVE-2026-101893Newell Brands DYMO ID document parsing failing file type extension authentication checkNewell Brands DYMO ID
- CVE-2026-105447Quay: quay: global read-only superuser can access build trigger write credentialsRed Hat Quay
- CVE-2026-84900HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security UpdatesHP ThinPro
- CVE-2026-105698Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpointslangflow-ai langflow · langflow-ai langflow-base +2
- CVE-2026-105768apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as rootchainguard-dev apko
- CVE-2026-93326Crafted Git build source can bypass certain policy validationmoby BuildKit
- CVE-2026-105696Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC commandpenpot
- CVE-2026-105695Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload sessionpenpot
- CVE-2026-105694Penpot: Stored XSS via Unsanitised SVG Uploadspenpot
- CVE-2026-105693Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundlepenpot
- CVE-2026-71297Maestro: maestro: grpc broker has no auth interceptor and client mtls is optionalRed Hat Multicluster Engine for Kubernetes
- CVE-2026-105692Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Createpenpot
- CVE-2026-105690Penpot: Server-side session not invalidated on logout; stale auth-token cookie remains valid for full profile accesspenpot
- CVE-2026-105689Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media downloadpenpot
- CVE-2026-105688Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path)penpot
- CVE-2026-105687Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protectionpenpot
- CVE-2026-105767Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commandsChainguard Academy
- CVE-2026-105686Penpot: Repeated chunk index causes temporary-storage amplificationpenpot
- CVE-2026-105766Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTPChainguard Academy
- CVE-2026-105392Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded keyLybbn Django-Vue-Lyadmin
- CVE-2026-105684Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scopepenpot
- CVE-2026-105683Ghost: Path Traversal Vulnerability in Ghost ImageSize ServiceTryGhost Ghost · ghost
- CVE-2026-105389feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted uploadfeelec-yishu feelcrm-os
- CVE-2026-105682Ghost: Server-Side Request Forgery in Webhook TriggerTryGhost Ghost · ghost
- CVE-2026-105681Ghost: Authorization Bypass in Comments FeatureTryGhost Ghost · ghost
- CVE-2026-105680Ghost: Authorization Issue Allowed Author Role to Delete any PostTryGhost Ghost · ghost
- CVE-2026-105678Ghost: Editors Could Promote Staff Users to Their Own RoleTryGhost Ghost · ghost
- CVE-2026-105676Ghost: Path Traversal via Locale SettingTryGhost Ghost · ghost
- CVE-2026-105388feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injectionfeelec-yishu feelcrm-os
- CVE-2026-104029Sssd: sssd: denial of service via out-of-bounds read in autofs responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-105652Ghost: Password Hash Ordering Disclosure in Ghost Admin APITryGhost Ghost · ghost
- CVE-2026-104030Sssd: sssd: denial of service via out-of-bounds read during passkey parsingRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-71299Maestro: maestro: rest api write endpoints registered without authentication middlewareRed Hat Multicluster Engine for Kubernetes
- CVE-2026-71298Maestro: sql identifier injection via properties.* search filter and orderby fieldRed Hat Multicluster Engine for Kubernetes
- CVE-2026-105648Ghost: Private IP Filtering Bypass via IPv6 Transition AddressesTryGhost Ghost · ghost
- CVE-2026-105647Ghost: Server-Side Request Forgery in Bookmark FetchingTryGhost Ghost · ghost
- CVE-2026-103337WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerabilityKirillbdev WC Ukraine Shipping
- CVE-2026-105326Cups: cups: argument injection in mailto notifier via notify-recipient-uriRed Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-105646Ghost: Regular Expression Denial of Service in Content ImportTryGhost Ghost · ghost
- CVE-2026-105645Ghost: Regular Expression Denial of Service in External Media InlinerTryGhost Ghost · ghost
- CVE-2026-105712gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive.GnuPG
- CVE-2026-105644Ghost: Stored XSS via SVG Files in Content ImportsTryGhost Ghost · ghost
- CVE-2026-105387girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-104713Apache Struts: Unbounded request body read in the REST pluginApache Software Foundation Apache Struts
- CVE-2026-105386onetwothreeneth HospitalManagementSystem print.php get sql injectiononetwothreeneth HospitalManagementSystem
- CVE-2026-58856In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-58834In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validaGoogle Android
- CVE-2026-55265In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2026-28667In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-97275WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerabilityVillaTheme BuildKit – Product Builder for WooCommerce – Cus…
- CVE-2026-97070WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerabilityCozyThemes Cozy Blocks
- CVE-2026-97305WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerabilityThemeisle AI Chatbot for WordPress – Hyve Lite
- CVE-2026-97304WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerabilityArraytics Timetics
- CVE-2026-103085WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerabilityWP User Manager
- CVE-2026-103086WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerabilityStiofan UsersWP
- CVE-2026-100509WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerabilityWebful Creations RepairBuddy
- CVE-2026-102383WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerabilityVillaTheme Lookzy
- CVE-2026-93323Oversized Dockerfile or .dockerignore can exhaust buildkitd memorymoby BuildKit
- CVE-2026-93322Malformed MergeOp can crash the BuildKit daemonmoby BuildKit
- CVE-2026-93320BuildKit improperly handles special files in build snapshotsmoby BuildKit
- CVE-2026-78413Velociraptor privilege escalation via SysmonLogForward client monitoring artifactRapid7 Velociraptor
- CVE-2026-93319A malicious frontend can cause a daemon panicmoby BuildKit
- CVE-2026-105385onetwothreeneth HospitalManagementSystem transaction_details.php sql injectiononetwothreeneth HospitalManagementSystem
- CVE-2026-93317Container blob cache can accept unverified contentmoby BuildKit
- CVE-2026-104905FacturaScripts < 2026.7 PHP Object Injection via WidgetSelectNeoRazorX facturascripts
- CVE-2026-78411Velociraptor Server Metadata update with Insufficient Permission CheckRapid7 Velociraptor
- CVE-2026-105384UNION HospitalManagementSystem patient_info.php sql injectionUNION HospitalManagementSystem
- CVE-2026-42700WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerabilityGhozyLab Image Slider Widget
- CVE-2026-102576Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin pageRed Hat Quay
- CVE-2026-102295Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameterRed Hat Quay
- CVE-2026-105383onetwothreeneth HospitalManagementSystem controller.php sql injectiononetwothreeneth HospitalManagementSystem
- CVE-2026-104969Plane: Cross-Tenant Cycle Issue Hijack via IDORmakeplane plane
- CVE-2026-104967Plane: Cross-workspace association destruction and issue mutation/read via unscoped queries in BulkDeleteIssuesEndpoint and SubIssuesEndpointmakeplane plane
- CVE-2026-104965Plane: Cross-Tenant Issue Relation Creation via IDORmakeplane plane
- CVE-2026-104964Plane: Cross-Workspace Project Modification via Unscoped Project Lookupmakeplane plane
- CVE-2026-78412WatchEvent API streams another organization's live eventsRapid7 Velociraptor
- CVE-2026-104963Plane: Workspace cycle and module endpoints missing project-membership filter expose private project metadata to any workspace membermakeplane plane
- CVE-2026-104962Plane: Cross-project member roster IDOR in ProjectMemberListCreateAPIEndpoint (missing project scope on reads)makeplane plane
- CVE-2026-104961Plane: WorkspaceOwnerPermission missing is_active check allows deactivated users to retain owner accessmakeplane plane
- CVE-2026-104960Plane: Authorization bypass in workspace-scoped asset download endpoint exposes secret project file assets to non-project workspace usersmakeplane plane
- CVE-2026-104956Plane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle)makeplane plane
- CVE-2026-105382onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorizationonetwothreeneth HospitalManagementSystem
- CVE-2026-104955Plane: Project Member can escalate Project Guest to Member via PATCH /project-members/{pk} (BAC / Privilege Escalation)makeplane plane
- CVE-2026-104894Plane: Cross-Tenant Module Issue Linking via IDORmakeplane plane
- CVE-2026-104893Plane: Improper validation allows arbitrary modification of API token rate limitsmakeplane plane
- CVE-2026-102779Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4joomlafry.com TF Content for Joomla
- CVE-2026-102777Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0svenbluege.de Event Gallery for Joomla
- CVE-2026-102426Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2joomshaper.com SP Page Builder (Pro) extension for Joomla
- CVE-2026-102778Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0svenbluege.de Event Gallery for Joomla
- CVE-2026-102780Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4joomlafry.com TF Content for Joomla
- CVE-2026-102776Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0svenbluege.de Event Gallery for Joomla
- CVE-2026-105329TallCMS PluginManager ThemeManager.php code injectionTallCMS
- CVE-2026-105397LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and ExplanationThimPress LearnPress
- CVE-2026-89039Arbitrary file read via the convert_playwright_script prompt in mcp-k6Grafana mcp-k6
- CVE-2026-105421WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerabilityKit (formerly ConvertKit) for WooCommerce
- CVE-2026-105315django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injectiondjango-haystack
- CVE-2026-77804Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® ClassicProgress Software Progress® Telerik® Fiddler® Classic
- CVE-2026-77803Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® ClassicProgress Software Progress® Telerik® Fiddler® Classic
- CVE-2026-77802HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® ClassicProgress Software Progress® Telerik® Fiddler® Classic
- CVE-2026-39783WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerabilityWP SYNTEX Polylang
- CVE-2026-103684WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerabilityArraytics WP Event Solution
- CVE-2026-105073WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerabilityArraytics WP Event Solution
- CVE-2026-63270Environment/ini-file leaksThe Document Foundation LibreOffice
- CVE-2026-63269LFI and GET SSRF via GStreamer and HLS playlistsThe Document Foundation LibreOffice
- CVE-2026-63268LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db hrefThe Document Foundation LibreOffice
- CVE-2026-63267LFI and GET SSRF via calcext:data-mappings and csv providerThe Document Foundation LibreOffice
- CVE-2026-63266Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionalityThe Document Foundation LibreOffice
- CVE-2026-105307Casdoor API Endpoint authz_filter.go ApiFilter missing authenticationCasdoor
- CVE-2026-105396Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Headerheymrun heym
- CVE-2026-94669WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerabilityWP ManageNinja Fluent Forms Pro Add On Pack
- CVE-2026-105291feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scriptingfeelec-yishu feelcrm-os
- CVE-2026-105290feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgeryfeelec-yishu feelcrm-os
- CVE-2026-59788Stored XSS vulnerability in OAuth configuration formZabbix
- CVE-2026-59787SNMP trap injection in zabbix_trap_receiver.plZabbix
- CVE-2026-59786Active agent heartbeat missing TLS checkZabbix
- CVE-2026-59785Hidden host credentials inferable via multiselect.get filteringZabbix
- CVE-2026-59783Server DoS via binary itemsZabbix
- CVE-2026-59782JavaScript preprocessing memory disclosureZabbix
- CVE-2026-39763WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerabilityDeepak Anand WP Dummy Content Generator
- CVE-2026-105289feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scriptingfeelec-yishu feelcrm-os
- CVE-2026-105288feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scriptingfeelec-yishu feelcrm-os
- CVE-2026-105287feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injectionfeelec-yishu feelcrm-os
- CVE-2026-105286Totolink A3002MU File Upload formUploadFile sub_44B250 path traversalTotolink A3002MU
- CVE-2026-19395An empty <img> attribute value in styled text triggers a parser error that halts the device.Qt for MCUs
- CVE-2026-39721WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerabilityBrainstorm Force Starter Templates
- CVE-2026-105064WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerabilityUnlimited Elements For Elementor
- CVE-2026-103351WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerabilityMagepeople Taxi Booking Manager for WooCommerce
- CVE-2026-104388WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerabilityBlubrry Podcasting PowerPress Podcasting
- CVE-2026-102393WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Starter Templates
- CVE-2026-103079WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerabilityAhmad JS Help Desk
- CVE-2026-104396WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerabilityJeroen Peters Name Directory
- CVE-2026-102914WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Presto Player
- CVE-2026-104675WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerabilityLiquid Web / StellarWP Event Tickets
- CVE-2026-103084WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerabilityLeapWorx Premium Addons for Elementor
- CVE-2026-104397WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerabilityJeroen Peters Name Directory
- CVE-2026-105060WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerabilityThemepoints Logo Showcase
- CVE-2026-104673WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerabilityMP3 Audio Player for Music, Radio & Podcast by Sonaar
- CVE-2026-105056WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerabilityimpleCode eCommerce Product Catalog
- CVE-2026-105263Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgeryShaarli
- CVE-2026-103335WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerabilityDeepen Bajracharya Video Conferencing with Zoom
- CVE-2026-105055WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerabilityWP Mailster
- CVE-2026-103511Arbitrary file-write via extension installation in P4SearchPerforce P4
- CVE-2026-97071WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerabilityVillaTheme CURCY
- CVE-2026-105062WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerabilityBrandtoss WP Admin Audit
- CVE-2026-103078WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerabilityAhmad JS Help Desk
- CVE-2026-103512Ticket host-binding bypass via spoofed client IP in P4SearchPerforce P4
- CVE-2026-104386WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerabilityWPFunnels Team WP VR
- CVE-2026-105069WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerabilityNikki Blight QR Redirector
- CVE-2026-104404WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP GiveWP
- CVE-2026-104808Mitel MiVoice Office 400 stored Cross-Site ScriptingMitel MiVoice Office
- CVE-2026-105254itsourcecode Online Admission System schoolyear.php sql injectionitsourcecode Online Admission System
- CVE-2026-104807Mitel MiVoice Office 400 stored Cross-Site ScriptingMitel MiVoice Office
- CVE-2026-105068WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerabilityPixelite Events Manager
- CVE-2026-104806Mitel MiVoice Office 400 System Logs Path Traversal Information DisclosureMitel MiVoice Office
- CVE-2026-104401WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerabilityMemberful - Membership Plugin
- CVE-2026-105253itsourcecode Online Admission System Project login1.php sql injectionitsourcecode Online Admission System Project
- CVE-2026-104400WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilitybPlugins B Blocks
- CVE-2026-104409WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerabilityWP Chill Image Photo Gallery Final Tiles Grid
- CVE-2026-105251vgmstream VAG File psx_decoder.c ps_find_padding out-of-boundsvgmstream
- CVE-2026-105250vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zerovgmstream
- CVE-2026-105249vgmstream TXTP File txtp_process.c make_group_random use after freevgmstream
- CVE-2026-105248vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds writevgmstream
- CVE-2026-105247SourceCodester Online Reviewer Management System btn_functions.php course sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-19954Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain namesNet-Whois-Raw
- CVE-2026-105246SourceCodester Online Reviewer Management System btn_functions.php update sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-100727An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pageGROWI
- CVE-2026-105245sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmissionsgl-project sglang
- CVE-2026-105238ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgeryChatGPTNextWeb NextChat
- CVE-2026-78371File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File DisclosureFile Uploads Addon for WooCommerce
- CVE-2026-13607File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File AccessFile Uploads Addon for WooCommerce
- CVE-2026-84169UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status ForgeryUPI QR Code Payment Gateway
- CVE-2026-105237linlinjava litemall Login Endpoint AdminAuthController.java excessive authenticationlinlinjava litemall
- CVE-2026-105306Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registrationRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-105302Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokensRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-105233kishor-23 food-waste-management-system Login Flow login.php session fixiationkishor-23 food-waste-management-system
- CVE-2026-105232kishor-23 food-waste-management-system Registration deliverysignup.php sql injectionkishor-23 food-waste-management-system
- CVE-2026-105231kishor-23 food-waste-management-system Admin Registration signup.php sql injectionkishor-23 food-waste-management-system
- CVE-2026-105230kishor-23 food-waste-management-system deliverymyord.php sql injectionkishor-23 food-waste-management-system
- CVE-2026-105229kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injectionkishor-23 food-waste-management-system
- CVE-2026-105226osCommerce osCommerce2 Newsletter Management newsletters.php include code injectionosCommerce2
- CVE-2026-105225osCommerce osCommerce2 Payment payment.php include code injectionosCommerce2
- CVE-2026-105188code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scriptingcode-projects Human Resource Management System
- CVE-2026-105187itsourcecode Online Admission System key.php sql injectionitsourcecode Online Admission System
- CVE-2026-105186itsourcecode Online Admission System new.php sql injectionitsourcecode Online Admission System
- CVE-2026-105185itsourcecode Online Admission System examinee.php sql injectionitsourcecode Online Admission System
- CVE-2026-105184itsourcecode Online Admission System creteria.php sql injectionitsourcecode Online Admission System
- CVE-2026-105183itsourcecode Online Admission System confirm.php sql injectionitsourcecode Online Admission System
- CVE-2026-105182SourceCodester Online Reviewer Management System btn_functions.php update sql injectionSourceCodester Online Reviewer Management System
- CVE-2026-105181itsourcecode Online Admission System register1.php sql injectionitsourcecode Online Admission System
- CVE-2026-105180Jeebase UserService info updateUser dynamically-determined object attributesJeebase
- CVE-2026-105179SourceCodester Drug Recommendation System Password add_user.php missing encryptionSourceCodester Drug Recommendation System
- CVE-2026-20543In Modem, there is a possible information disclosure due to a logic error.MediaTek chipset
- CVE-2026-20542In apusys, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20541In Modem, there is a possible out of bounds read due to a missing permission check.MediaTek chipset
- CVE-2026-20540In Modem, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20539In Modem, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20538In Modem, there is a possible out of bounds read due to a missing permission check.MediaTek chipset
- CVE-2026-20537In aidl, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20536In aidl, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20535In aidl, there is a possible escalation of privilege due to a missing permission check.MediaTek chipset
- CVE-2026-20534In Modem, there is a possible out of bounds read due to an incorrect bounds check.MediaTek chipset
- CVE-2026-20533In display, there is a possible escalation of privilege due to an integer overflow.MediaTek chipset
- CVE-2026-20532In apu, there is a possible application crash due to double free.MediaTek chipset
- CVE-2026-20530In display, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20529In battery, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20528In ccci, there is a possible out of bounds write and read due to a missing bounds check.MediaTek chipset
- CVE-2026-20544In meta, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20588In mtee, there is a possible escalation of privilege due to a missing bounds check.MediaTek chipset
- CVE-2026-20587In mtee, there is a possible escalation of privilege due to type confusion.MediaTek chipset
- CVE-2026-20579In vdec, there is a possible out of bounds write due to type confusion.MediaTek chipset
- CVE-2026-20527In Modem, there is a possible system crash due to a missing bounds check.MediaTek chipset
- CVE-2026-20525In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20589In venc, there is a possible out of bounds write due to type confusion.MediaTek chipset
- CVE-2026-105178SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injectionSourceCodester Drug Recommendation System
- CVE-2026-105177SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injectionSourceCodester Drug Recommendation System
- CVE-2026-105176SourceCodester Drug Recommendation System edit_class.php sql injectionSourceCodester Drug Recommendation System
- CVE-2026-105175SourceCodester Drug Recommendation System Student Registration add_student.php sql injectionSourceCodester Drug Recommendation System
- CVE-2026-105292Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth CallbackChaterm
- CVE-2026-105174Gerapy Project Management views.py project_create path traversalGerapy
- CVE-2026-105173code-projects Human Resource Management Event Creation EventStore.php cross site scriptingcode-projects Human Resource Management
- CVE-2026-105172itsourcecode Online Admission System login1.php sql injectionitsourcecode Online Admission System
- CVE-2026-78862An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (P
- CVE-2026-88397ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter.
- CVE-2026-95165Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.
- CVE-2026-95166In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload.
- CVE-2026-95264Feehi CMS 2.1.1 is vulnerable to Directory Traversal.