[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102437 | 29 Sep 2026 | CVSS 7.8 | esengine DeepSeek-ReasonixOS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local… | |
| CVE-2026-101267 | 29 Sep 2026 | CVSS 2.7 | pretixA missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific… | |
| CVE-2026-101268 | 29 Sep 2026 | CVSS 1.7 | pretixIf an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim… | |
| CVE-2026-101269 | 29 Sep 2026 | CVSS 2.3 | pretixThe mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all… | |
| CVE-2026-101270 | 29 Sep 2026 | CVSS 2.1 | pretixMalicious HTML content could be injected into the help texts of various fields with organizer permissions. | |
| CVE-2026-101271 | 29 Sep 2026 | CVSS 2.1 | pretixOAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually… | |
| CVE-2026-100828 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxMitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100829 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox… | |
| CVE-2026-100830 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxMitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100831 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird… | |
| CVE-2026-100832 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox… | |
| CVE-2026-100818 | 29 Sep 2026 | CVSS 9.6 | Mozilla ThunderbirdSandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird… | |
| CVE-2026-100819 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100820 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdPrivilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100821 | 29 Sep 2026 | CVSS 4.7 | Mozilla FirefoxSite isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100822 | 29 Sep 2026 | CVSS 5.4 | Mozilla FirefoxSpoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox… | |
| CVE-2026-100823 | 29 Sep 2026 | CVSS 5.4 | Mozilla FirefoxSpoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. | |
| CVE-2026-100824 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | |
| CVE-2026-100825 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100826 | 29 Sep 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4… | |
| CVE-2026-100809 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxSame-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100810 | 29 Sep 2026 | CVSS 9.8 | Mozilla ThunderbirdOther issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100811 | 29 Sep 2026 | CVSS 9.6 | Mozilla ThunderbirdSandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100812 | 29 Sep 2026 | CVSS 6.5 | Mozilla FirefoxDenial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | |
| CVE-2026-100813 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdInvalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100814 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100815 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4… | |
| CVE-2026-100816 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxSite isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100817 | 29 Sep 2026 | CVSS 5.4 | Mozilla ThunderbirdOther issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100800 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100801 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdPrivilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100802 | 29 Sep 2026 | CVSS 4.3 | Mozilla ThunderbirdUninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100803 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxSame-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100804 | 29 Sep 2026 | CVSS 9.6 | Mozilla ThunderbirdSandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100805 | 29 Sep 2026 | CVSS 7.5 | Mozilla ThunderbirdRace condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100806 | 29 Sep 2026 | CVSS 4.3 | Mozilla FirefoxUninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100807 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdPrivilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100808 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxMitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100790 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… | |
| CVE-2026-100791 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100792 | 29 Sep 2026 | CVSS 7.1 | Mozilla ThunderbirdJIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100793 | 29 Sep 2026 | CVSS 6.5 | Mozilla ThunderbirdJIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100794 | 29 Sep 2026 | CVSS 9.6 | Mozilla ThunderbirdSandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4… | |
| CVE-2026-100795 | 29 Sep 2026 | CVSS 6.5 | Mozilla ThunderbirdDenial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100796 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100797 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100798 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxCryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100799 | 29 Sep 2026 | CVSS 4.3 | Mozilla ThunderbirdUninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100781 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4… | |
| CVE-2026-100782 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxPrivilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird… | |
| CVE-2026-100783 | 29 Sep 2026 | CVSS 4.3 | Mozilla FirefoxUninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100784 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100785 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100786 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird… | |
| CVE-2026-100787 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | |
| CVE-2026-100788 | 29 Sep 2026 | CVSS 9.8 | Mozilla ThunderbirdInvalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100789 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100775 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… | |
| CVE-2026-100776 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100777 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100778 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100779 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… | |
| CVE-2026-100780 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100768 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdUse-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100769 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100770 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100771 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxUndefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100772 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100773 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100774 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100757 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… | |
| CVE-2026-100758 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… | |
| CVE-2026-100759 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxUninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100760 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4… | |
| CVE-2026-100761 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdPrivilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100762 | 29 Sep 2026 | CVSS 9.6 | Mozilla FirefoxSandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… | |
| CVE-2026-100763 | 29 Sep 2026 | CVSS 9.1 | Mozilla ThunderbirdIncorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100764 | 29 Sep 2026 | CVSS 8.8 | Mozilla ThunderbirdPrivilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and… | |
| CVE-2026-100765 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and… | |
| CVE-2026-100766 | 29 Sep 2026 | CVSS 4.3 | Mozilla FirefoxInformation disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100767 | 29 Sep 2026 | CVSS 8.8 | Mozilla FirefoxUse-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… | |
| CVE-2026-100756 | 29 Sep 2026 | CVSS 8.1 | Mozilla FirefoxIncorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird… | |
| CVE-2026-85520 | 29 Sep 2026 | CVSS 9.3 | MyPresta Google Merchant Center FeedGoogle Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An… | |
| CVE-2026-87748 | 29 Sep 2026 | CVSS 8.8 | Interprobe Information Technologies Inc. Qorela DCMissing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from… | |
| CVE-2026-95520 | 29 Sep 2026 | CVSS 7.1 | Red Hat Enterprise Linux 10A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is… | |
| CVE-2026-73593 | 29 Sep 2026 | CVSS 6.7 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged… | Fix |
| CVE-2026-73594 | 29 Sep 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation… | Fix |
| CVE-2026-73595 | 29 Sep 2026 | CVSS 9.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity… | Fix |
| CVE-2026-73596 | 29 Sep 2026 | CVSS 6.5 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default… | Fix |
| CVE-2026-73597 | 29 Sep 2026 | CVSS 8.1 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An… | Fix |
| CVE-2026-41875 | 29 Sep 2026 | CVSS 6.9 | OpenSolution Quick.CartQuick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the… | |
| CVE-2026-66083 | 29 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache DolphinSchedulerThe /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to… | |
| CVE-2026-101266 | 29 Sep 2026 | CVSS 1.3 | pretixA logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps. | |
| CVE-2026-102495 | 29 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache XMLSchemaApache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack… | |
| CVE-2026-102496 | 29 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache XMLSchemaApache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing… | |
| CVE-2026-102497 | 29 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache XMLSchemaThe Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A… | |
| CVE-2026-102507 | 29 Sep 2026 | CVSS 5.7 | BishopFox sliverSliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker… | |
| CVE-2026-95509 | 29 Sep 2026 | CVSS 8.8 | Qt for MCUsStrings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing… | |
| CVE-2026-96422 | 29 Sep 2026 | CVSS 5.5 | Wireshark Foundation WiresharkFrame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | Fix |
| CVE-2026-96423 | 29 Sep 2026 | CVSS 7.1 | Wireshark Foundation WiresharkX11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
Page 142 of 168