[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101052 | 28 Sep 2026 | CVSS 7.3 | refly-ai reflyA security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file… | |
| CVE-2026-81867 | 28 Sep 2026 | CVSS 9.4 | Google Cloud Application IntegrationA Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on… | |
| CVE-2026-91006 | 28 Sep 2026 | CVSS 8.8 | Apache Software Foundation Apache KarafApache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concatenation… | |
| CVE-2026-81375 | 28 Sep 2026 | CVSS 8.3 | Google Cloud Application IntegrationA Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud… | |
| CVE-2026-19759 | 28 Sep 2026 | CVSS 9.4 | Google Cloud Application IntegrationAn Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google… | |
| CVE-2026-12268 | 28 Sep 2026 | CVSS 8.8 | Zohocorp DDI CentralManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code… | |
| CVE-2026-12269 | 28 Sep 2026 | CVSS 8.8 | Zohocorp DDI CentralZohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow… | |
| CVE-2026-101038 | 28 Sep 2026 | CVSS 9.9 | FAST FAC1200RA vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component… | |
| CVE-2026-101039 | 28 Sep 2026 | CVSS 10.0 | FAST FAC1900RA vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover… | |
| CVE-2026-101040 | 28 Sep 2026 | CVSS 6.5 | Ricoh SP 330DNA security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the… | |
| CVE-2026-12267 | 28 Sep 2026 | CVSS 7.2 | Zohocorp DDI CentralManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote… | |
| CVE-2026-7170 | 28 Sep 2026 | CVSS 4.8 | TPVEnlanube Cloud Web applicationStored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7170: parameter 'vendor_store_name' in… | |
| CVE-2026-7171 | 28 Sep 2026 | CVSS 4.8 | TPVEnlanube Cloud Web applicationStored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7171: parameter 'Apellido 1' in the… | |
| CVE-2026-7172 | 28 Sep 2026 | CVSS 4.8 | TPVEnlanube Cloud Web applicationStored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7172: parameter 'Nombre Completo' in the… | |
| CVE-2026-90979 | 28 Sep 2026 | CVSS 7.3 | Apache Software Foundation Apache KarafLDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and… | |
| CVE-2026-101018 | 28 Sep 2026 | CVSS 4.7 | dayrui XunruiCMSA vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function group_all_edit of the file… | |
| CVE-2026-101035 | 28 Sep 2026 | CVSS 5.3 | aligungr UERANSIMA flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the… | |
| CVE-2026-101036 | 28 Sep 2026 | CVSS 5.3 | FLB-Music-PlayerA vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file… | |
| CVE-2026-101037 | 28 Sep 2026 | CVSS 9.9 | FAST FAC1200RA vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover… | |
| CVE-2026-94282 | 28 Sep 2026 | CVSS 5.6 | x.org libXiAn out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an… | |
| CVE-2026-94283 | 28 Sep 2026 | CVSS 6.5 | x.org libX11An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to… | |
| CVE-2026-94284 | 28 Sep 2026 | CVSS 5.5 | x.org libX11An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to… | |
| CVE-2026-94285 | 28 Sep 2026 | CVSS 5.1 | x.org libX11An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X… | |
| CVE-2026-94286 | 28 Sep 2026 | CVSS 7.1 | x.org libXtstAn out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. | |
| CVE-2026-94287 | 28 Sep 2026 | CVSS 5.5 | x.org libXpmA denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU… | |
| CVE-2026-95104 | 28 Sep 2026 | CVSS 7.5 | BUFFALO INC. WSR-300HPStack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service… | |
| CVE-2026-82915 | 28 Sep 2026 | CVSS 6.5 | Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management SystemImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document… | |
| CVE-2026-82969 | 28 Sep 2026 | CVSS 5.4 | Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management SystemImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus… | |
| CVE-2026-85134 | 28 Sep 2026 | CVSS 8.8 | Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management SystemUnrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System… | |
| CVE-2026-86507 | 28 Sep 2026 | CVSS 6.1 | Apache Software Foundation Apache RollerImproper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute… | |
| CVE-2026-86530 | 28 Sep 2026 | CVSS 7.2 | BUFFALO INC. WSR-300HPBUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted… | |
| CVE-2026-101015 | 28 Sep 2026 | CVSS 7.3 | Trusted Domain Project OpenDMARCA flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of… | |
| CVE-2026-101016 | 28 Sep 2026 | CVSS 6.5 | Trusted Domain Project OpenDMARCA vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_policy_parse_dmarc in the library… | |
| CVE-2026-101017 | 28 Sep 2026 | CVSS 6.5 | Trusted Domain Project OpenDMARCA vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library… | |
| CVE-2026-101014 | 28 Sep 2026 | CVSS 7.3 | Trusted Domain Project OpenDMARCA vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup… | |
| CVE-2026-91206 | 28 Sep 2026 | CVSS 6.1 | Apache Software Foundation Apache RollerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform… | |
| CVE-2026-82382 | 28 Sep 2026 | CVSS 6.1 | Apache Software Foundation Apache RollerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform… | |
| CVE-2026-82383 | 28 Sep 2026 | CVSS 8.2 | Apache Software Foundation Apache RollerMissing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global… | |
| CVE-2026-82384 | 28 Sep 2026 | CVSS 9.8 | Apache Software Foundation Apache RollerDeserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled… | |
| CVE-2026-82385 | 28 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache RollerExposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application… | |
| CVE-2026-82386 | 28 Sep 2026 | CVSS 7.7 | Apache Software Foundation Apache RollerImproper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller… | |
| CVE-2026-82387 | 28 Sep 2026 | CVSS 5.4 | Apache Software Foundation Apache RollerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with media-upload rights to… | |
| CVE-2026-82546 | 28 Sep 2026 | CVSS 6.1 | Apache Software Foundation Apache RollerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote attacker… | |
| CVE-2026-91204 | 28 Sep 2026 | CVSS 6.1 | Apache Software Foundation Apache RollerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an anonymous remote attacker to… | |
| CVE-2026-82375 | 28 Sep 2026 | CVSS 7.4 | Apache Software Foundation Apache RollerServer-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP… | |
| CVE-2026-82376 | 28 Sep 2026 | CVSS 7.7 | Apache Software Foundation Apache RollerImproper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server… | |
| CVE-2026-82377 | 28 Sep 2026 | CVSS 9.9 | Apache Software Foundation Apache RollerMissing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belonging to other weblogs… | |
| CVE-2026-82378 | 28 Sep 2026 | CVSS 9.0 | Apache Software Foundation Apache RollerIncorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an… | |
| CVE-2026-82379 | 28 Sep 2026 | CVSS 7.7 | Apache Software Foundation Apache RollerAuthentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who captures a valid WSSE digest authentication header to replay it… | |
| CVE-2026-82380 | 28 Sep 2026 | CVSS 8.1 | Apache Software Foundation Apache RollerCross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform state-changing actions under… | |
| CVE-2026-82381 | 28 Sep 2026 | CVSS 5.4 | Apache Software Foundation Apache RollerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with authoring rights on a… | |
| CVE-2026-82348 | 28 Sep 2026 | CVSS 7.7 | Apache Software Foundation Apache RollerAuthorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read… | |
| CVE-2026-101012 | 28 Sep 2026 | CVSS 7.3 | mathurvishal CloudClassroom-PHP-ProjectA weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown… | |
| CVE-2026-101013 | 28 Sep 2026 | CVSS 7.3 | mathurvishal CloudClassroom-PHP-ProjectA security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an… | |
| CVE-2026-101010 | 28 Sep 2026 | CVSS 4.7 | aaPanel BaoTaA vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file… | |
| CVE-2026-101011 | 28 Sep 2026 | CVSS 4.7 | aaPanel BaoTaA security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file… | |
| CVE-2026-88828 | 28 Sep 2026 | CVSS 5.4 | Unknown Blacklist ManagerThe Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing… | |
| CVE-2026-89300 | 28 Sep 2026 | CVSS 5.3 | Unknown WP Verify APIThe WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to… | |
| CVE-2026-89303 | 28 Sep 2026 | CVSS 6.4 | Unknown Post Voting SystemThe Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any… | |
| CVE-2026-89411 | 28 Sep 2026 | CVSS 5.3 | Unknown PaymatticThe Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to… | |
| CVE-2026-92996 | 28 Sep 2026 | CVSS 5.3 | Unknown Verge3D Publishing and E-CommerceThe Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check… | |
| CVE-2026-93000 | 28 Sep 2026 | CVSS 6.8 | Unknown SPS-SuiteThe SPS-Suite WordPress plugin through 1.4.0 does not sanitise the search query before using it in a SQL query when its static-page search feature is… | |
| CVE-2026-101006 | 28 Sep 2026 | CVSS 4.3 | Frappe HRA flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function… | |
| CVE-2026-101007 | 28 Sep 2026 | CVSS 8.4 | aaPanel BaoTaA vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component… | |
| CVE-2026-101008 | 28 Sep 2026 | CVSS 9.1 | aaPanel BaoTaA vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of… | |
| CVE-2026-101009 | 28 Sep 2026 | CVSS 8.4 | aaPanel BaoTaA vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip of the file… | |
| CVE-2026-84744 | 28 Sep 2026 | CVSS 6.5 | Unknown WPFormsThe WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back… | |
| CVE-2026-86838 | 28 Sep 2026 | CVSS 5.3 | Unknown BooklyThe Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment… | |
| CVE-2026-100751 | 28 Sep 2026 | CVSS 7.5 | regularlabs.com Tabs & Accordions (Free, Pro) extension for JoomlaJoomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 - Tabs & Accordions… | |
| CVE-2026-101005 | 28 Sep 2026 | CVSS 7.3 | October CMSA vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file… | |
| CVE-2026-100750 | 28 Sep 2026 | CVSS 8.5 | regularlabs.com Modules Anywhere (Pro) extension for JoomlaJoomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a… | |
| CVE-2026-101003 | 28 Sep 2026 | CVSS 5.3 | Cesanta MongooseA weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file… | |
| CVE-2026-101004 | 28 Sep 2026 | CVSS 5.3 | notionnext-org NotionNextA security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of the file… | |
| CVE-2026-101002 | 28 Sep 2026 | CVSS 9.9 | Netcore NBR200V2A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the… | |
| CVE-2026-100909 | 28 Sep 2026 | CVSS 7.3 | OctoberCMSA vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file… | |
| CVE-2026-101000 | 28 Sep 2026 | CVSS 10.0 | Netcore NBR100V2A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file… | |
| CVE-2026-101001 | 28 Sep 2026 | CVSS 10.0 | Netcore NBR200V2A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the… | |
| CVE-2026-87723 | 28 Sep 2026 | CVSS 5.4 | Google fuse-archiveIn Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled… | |
| CVE-2026-100908 | 28 Sep 2026 | CVSS 7.5 | EyeplusA vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads… | |
| CVE-2026-100907 | 28 Sep 2026 | CVSS 5.3 | EyeplusA flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This… | |
| CVE-2026-100906 | 28 Sep 2026 | CVSS 5.3 | EyeplusA vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF… | |
| CVE-2026-100903 | 28 Sep 2026 | CVSS 5.3 | ООО НПО Ритм GEOritmA vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the… | |
| CVE-2026-100904 | 28 Sep 2026 | CVSS 3.5 | amirsanni mini-inventory-and-sales-management-systemA security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95… | |
| CVE-2026-100902 | 28 Sep 2026 | CVSS 6.5 | Barco ClickShare CX-20 Gen2A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file… | |
| CVE-2026-100899 | 28 Sep 2026 | CVSS 6.3 | DevaslanPHP project-managementA flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file… | |
| CVE-2026-100900 | 28 Sep 2026 | CVSS 5.5 | DevaslanPHP project-managementA vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of… | |
| CVE-2026-100901 | 28 Sep 2026 | CVSS 7.3 | athlon1600 youtube-downloaderA vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file… | |
| CVE-2026-100893 | 28 Sep 2026 | CVSS 7.3 | Privoce VoceChat ServerA vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_graph::fetch of the file… | |
| CVE-2026-100894 | 28 Sep 2026 | CVSS 6.3 | mathurvishal CloudClassroom-PHP-ProjectA vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some… | |
| CVE-2026-100895 | 28 Sep 2026 | CVSS 5.3 | Trusted Domain Project OpenARCA security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library… | |
| CVE-2026-100896 | 28 Sep 2026 | CVSS 9.9 | TOTOLINK N150RTA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey… | |
| CVE-2026-100897 | 28 Sep 2026 | CVSS 5.5 | fuzui StudentInfoA security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown… | |
| CVE-2026-100898 | 28 Sep 2026 | CVSS 6.3 | DevaslanPHP project-managementA vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file… | |
| CVE-2026-100890 | 28 Sep 2026 | CVSS 5.3 | Trusted Domain Project OpenDMARCA flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in… | |
| CVE-2026-100891 | 28 Sep 2026 | CVSS 7.3 | Trusted Domain Project OpenDMARCA vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarc_policy_query_dmarc… | |
| CVE-2026-100892 | 28 Sep 2026 | CVSS 5.3 | aligungr UERANSIMA vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of… | |
| CVE-2026-100887 | 28 Sep 2026 | CVSS 6.3 | amirsanni Mini-Inventory-and-Sales-Management-SystemA security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The… | |
| CVE-2026-100888 | 28 Sep 2026 | CVSS 7.3 | Trusted Domain Project OpenDKIMA weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file… | |
| CVE-2026-100889 | 28 Sep 2026 | CVSS 7.3 | Trusted Domain Project OpenDKIMA vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of the file util.c of the… | |
| CVE-2026-96284 | 27 Sep 2026 | CVSS 2.5 | Red Hat Enterprise Linux 10A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code… |
Page 146 of 168