Histórico de CVEs
-
CVE.orgCVE-2026-115931
Arbitrary file read and backend crash through unrestricted provider method calls
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115938
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115937
Unauthenticated payment reuse allows unpaid orders to be marked as paid
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115801
Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115935
Control panel only API response emulation replaces "securityKey" and reaches server RCE
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115895
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115893
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115892
Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115889
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115887
graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115886
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115885
LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115883
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-113951
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-75525
OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115800
UbiquitousLearning mllm Convertor __init__.py load_model path traversal
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-75524
OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-65825
OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-65824
OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-58202
OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115877
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-83813
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115778
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115776
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115775
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115774
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115797
Tenda F6 Web Management cleartext transmission
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-79982
Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-79981
DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-79980
Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-79979
Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frames
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-79978
Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read path
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-79977
WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-19741
OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115796
Tenda F6 Web Management cross-site request forgery
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115586
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115585
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115580
pypdf: Possible long runtimes for large xref table header limits
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115572
pypdf: Possible long runtimes for repeated references to the same missing object
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115845
Incomplete validation in the run_script Python sandbox in AWS MCP Server
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-91093
HP One Agent Software – Security Update
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-112342
Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115570
Electron: Mitigation for compromised eMudhra intermediate certificates
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115569
Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115863
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115813
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115812
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
Publicado · Snapshot da fonte
-
CVE.orgCVE-2026-115567
Tokio: Race condition in `tokio::time::Interval`
Publicado · Snapshot da fonte
Cobertura
Cobertura e continuidade dos deltas não verificadas
O snapshot mais recente não comprova que o catálogo está em dia.
- Registros publicados atuais
- 395207
- Registros rejeitados atuais
- 18635
- Data de publicação desconhecida (subconjunto)
- 6436
Detalhes da importação
cve_2026-10-24_midnight_baseline
- Tipo de importação
- Base
- Escopo declarado
{"kind":"baseline","partitions":[1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026],"expectedRecords":413842}- Partições de identificadores observadas (não comprovam cobertura)
[1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026]- Checkpoint
- 413842
- Entrada declarada
- Entrada declarada concluída
- Resultado da importação
- Nenhuma falha registrada
- Documentos publicados na entrada
- 395207
- Documentos rejeitados na entrada
- 18635
- Data de publicação desconhecida (subconjunto)
- 6436