CVE-2026-102290 | Low | 3.5 | 2026-09-29 | A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a… |
CVE-2026-102264 | Low | 3.5 | 2026-09-29 | A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file fron… |
CVE-2026-102414 | Low | 3.7 | 2026-09-29 | pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js). A password longer tha… |
CVE-2026-102241 | Low | 2.7 | 2026-09-29 | A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the… |
CVE-2026-102363 | Low | 3.7 | 2026-09-29 | mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to re… |
CVE-2026-101265 | Low | 3.1 | 2026-09-29 | A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation… |
CVE-2026-97027 | Low | 3.6 | 2026-09-28 | Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.desktop) and D-Bus Service (.service) files… |
CVE-2026-97026 | Low | 3.9 | 2026-09-28 | Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a permissive uma… |
CVE-2026-97025 | Low | 3.2 | 2026-09-28 | Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cache directory, allowing other local user… |
CVE-2026-18416 | Low | 3.7 | 2026-09-28 | The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a registered resource path against the URI carried in a Uri-Que… |
CVE-2026-102279 | Low | 3.1 | 2026-09-28 | Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tip… |
CVE-2026-101915 | Low | 3.7 | 2026-09-28 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handl… |
CVE-2026-101141 | Low | 3.5 | 2026-09-28 | A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page… |
CVE-2026-101139 | Low | 2.7 | 2026-09-28 | A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the compone… |
CVE-2026-101132 | Low | 3.1 | 2026-09-28 | A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/a… |
CVE-2026-101131 | Low | 3.3 | 2026-09-28 | A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of t… |
CVE-2026-97399 | Low | 3.7 | 2026-09-28 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may cra… |
CVE-2026-101079 | Low | 2.8 | 2026-09-28 | A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/… |
CVE-2026-101333 | Low | 3.7 | 2026-09-28 | A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the… |
CVE-2026-100904 | Low | 3.5 | 2026-09-28 | A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is… |
CVE-2026-96284 | Low | 2.5 | 2026-09-27 | A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the… |
CVE-2026-96283 | Low | 3.3 | 2026-09-27 | By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, makin… |
CVE-2026-96282 | Low | 3.1 | 2026-09-27 | A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can b… |
CVE-2026-100882 | Low | 2.4 | 2026-09-27 | A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/component… |
CVE-2026-100881 | Low | 2.6 | 2026-09-27 | A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such… |
CVE-2026-101089 | Low | 3.1 | 2026-09-27 | Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authen… |
CVE-2026-100880 | Low | 3.5 | 2026-09-27 | A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/comm… |
CVE-2026-101057 | Low | 3.1 | 2026-09-27 | utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration w… |
CVE-2026-101051 | Low | 3.1 | 2026-09-27 | Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected… |
CVE-2026-101046 | Low | 3.1 | 2026-09-27 | Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activ… |
CVE-2026-100867 | Low | 3.3 | 2026-09-27 | spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers ca… |
CVE-2026-100866 | Low | 3.3 | 2026-09-27 | onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injec… |
CVE-2026-86839 | Low | 3.8 | 2026-09-27 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its s… |
CVE-2026-100837 | Low | 3.7 | 2026-09-27 | Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration in the imagepuller. Config.registryFor… |
CVE-2025-71424 | Low | 3.5 | 2026-09-27 | Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Doc… |
CVE-2026-100649 | Low | 3.7 | 2026-09-26 | vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent coun… |
CVE-2026-100620 | Low | 3.8 | 2026-09-26 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Googl… |
CVE-2026-100311 | Low | 3.5 | 2026-09-26 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The affected element is an unknown fu… |
CVE-2026-96526 | Low | 2.7 | 2026-09-26 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing u… |
CVE-2026-96525 | Low | 2.7 | 2026-09-26 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on its workflow create, update and del… |
CVE-2026-100573 | Low | 3.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to in… |
CVE-2026-100542 | Low | 3.1 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffix… |
CVE-2026-100539 | Low | 2.6 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search… |
CVE-2026-100537 | Low | 3.1 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In de… |
CVE-2026-100534 | Low | 3.1 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sess… |
CVE-2026-100503 | Low | 3.3 | 2026-09-26 | Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect… |
CVE-2026-100417 | Low | 3.1 | 2026-09-25 | RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read f… |
CVE-2025-1218 | Low | 3.4 | 2026-09-25 | The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromis… |
CVE-2026-97897 | Low | 3.5 | 2026-09-25 | A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component Ti… |
CVE-2026-97896 | Low | 3.5 | 2026-09-25 | A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationForm::rules of the file packages/Webkul/… |
CVE-2026-97868 | Low | 3.5 | 2026-09-25 | A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/no… |
CVE-2026-97228 | Low | 2.7 | 2026-09-25 | Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component (`get_export_status` in `src/exp… |
CVE-2026-75553 | Low | 2.4 | 2026-09-25 | Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptogr… |
CVE-2026-97721 | Low | 2.7 | 2026-09-25 | A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-p… |
CVE-2026-97764 | Low | 3.7 | 2026-09-25 | django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the h… |
CVE-2026-97233 | Low | 3.5 | 2026-09-24 | A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component… |
CVE-2026-63630 | Low | 3.4 | 2026-09-24 | BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl control from impor… |
CVE-2026-73064 | Low | 2.9 | 2026-09-24 | In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TL… |
CVE-2026-19492 | Low | 3.2 | 2026-09-24 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor… |
CVE-2026-77797 | Low | 3.6 | 2026-09-24 | Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files. |
CVE-2026-18857 | Low | 3.4 | 2026-09-24 | IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware manage… |
CVE-2026-18104 | Low | 3.3 | 2026-09-24 | IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode fo… |
CVE-2026-17511 | Low | 3.4 | 2026-09-24 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vu… |
CVE-2026-93661 | Low | 2.7 | 2026-09-24 | The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers of the ticket it was authorized against… |
CVE-2026-89004 | Low | 2.7 | 2026-09-24 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and… |
CVE-2026-84151 | Low | 3.5 | 2026-09-24 | The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowin… |
CVE-2026-96810 | Low | 3.5 | 2026-09-24 | A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-a… |
CVE-2026-92628 | Low | 3.1 | 2026-09-24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race con… |
CVE-2026-96552 | Low | 3.1 | 2026-09-23 | A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the fi… |
CVE-2026-96550 | Low | 3.7 | 2026-09-23 | A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_… |
CVE-2026-96549 | Low | 3.3 | 2026-09-23 | A vulnerability has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssm_p… |
CVE-2026-96546 | Low | 2.5 | 2026-09-23 | A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in pe… |
CVE-2026-71465 | Low | 3.1 | 2026-09-23 | RunAdHocCommand.build_args() appends limit as bare
positional (args.append(limit)) instead of using
args.extend(['-l', limit]) like… |
CVE-2026-71464 | Low | 3.1 | 2026-09-23 | LaunchConfigurationBaseSerializer.scm_branch has no
validate_scm_branch() leading-dash check, unlike
Project/JobTemplate/JobLaunch… |
CVE-2026-71463 | Low | 2.7 | 2026-09-23 | Notification template Jinja AST whitelist only inspects
static Getattr nodes. Dynamic subscripts (job['job'+'_env'])
and {% if job… |
CVE-2026-96675 | Low | 3.3 | 2026-09-23 | alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access… |
CVE-2026-4921 | Low | 2.7 | 2026-09-23 | IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the… |
CVE-2026-71178 | Low | 3.7 | 2026-09-23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerab… |
CVE-2026-77756 | Low | 3.7 | 2026-09-23 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat caused by processing the transfer-encoding head… |
CVE-2026-87848 | Low | 3.7 | 2026-09-23 | The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentication on one of its AJAX actions available to unauthenticate… |
CVE-2026-93528 | Low | 3.7 | 2026-09-23 | The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticat… |
CVE-2026-93507 | Low | 3.3 | 2026-09-23 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-l… |
CVE-2026-91077 | Low | 2.7 | 2026-09-23 | The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is permitted t… |
CVE-2026-90951 | Low | 3.7 | 2026-09-23 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing some… |
CVE-2026-87074 | Low | 3.7 | 2026-09-23 | The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both the reci… |
CVE-2026-87069 | Low | 3.1 | 2026-09-23 | The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time payment-field migratio… |
CVE-2026-84743 | Low | 3.8 | 2026-09-23 | The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing users with a… |
CVE-2026-84742 | Low | 2.7 | 2026-09-23 | The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST AP… |
CVE-2026-95958 | Low | 3.3 | 2026-09-23 | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component P… |
CVE-2026-18173 | Low | 3.7 | 2026-09-22 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutua… |
CVE-2026-62364 | Low | 2.3 | 2026-09-22 | wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration from .weblate, .weblate.ini, or weblate.i… |
CVE-2026-95657 | Low | 3.5 | 2026-09-22 | A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectioni… |
CVE-2026-95818 | Low | 3.6 | 2026-09-22 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt… |
CVE-2026-92706 | Low | 3.4 | 2026-09-22 | Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can cause the browser extension's image inversi… |
CVE-2026-81884 | Low | 2.5 | 2026-09-22 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_IN_CODE parser was vulnerable because t… |
CVE-2026-81883 | Low | 3.3 | 2026-09-22 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable becaus… |
CVE-2026-81882 | Low | 3.3 | 2026-09-22 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable bec… |
CVE-2026-81881 | Low | 3.3 | 2026-09-22 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable beca… |
CVE-2026-77637 | Low | 3.8 | 2026-09-22 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") in routers/router.go inherit ScopeAdminR… |
CVE-2026-95272 | Low | 3.7 | 2026-09-22 | A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function static_content of the file changedetectionio/flask_app.py of t… |