| CVE-2026-119370 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid W… | 2026-10-30 |
| CVE-2026-119482 | MEDIUM | 5.3 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly … | 2026-10-30 |
| CVE-2026-119644 | MEDIUM | 5.4 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly u… | 2026-10-30 |
| CVE-2026-119645 | MEDIUM | 6.5 | ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authen… | 2026-10-30 |
| CVE-2026-119646 | MEDIUM | 4.3 | Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to re… | 2026-10-30 |
| CVE-2026-119647 | MEDIUM | 4.3 | RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserLi… | 2026-10-30 |
| CVE-2026-119648 | MEDIUM | 4.3 | Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows auth… | 2026-10-30 |
| CVE-2026-119649 | HIGH | 7.1 | Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckM… | 2026-10-30 |
| CVE-2026-119650 | MEDIUM | 5.4 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that… | 2026-10-30 |
| CVE-2026-119651 | MEDIUM | 5.4 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed… | 2026-10-30 |
| CVE-2026-119652 | MEDIUM | 4.3 | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.frien… | 2026-10-30 |
| CVE-2026-119653 | MEDIUM | 4.3 | Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend use… | 2026-10-30 |
| CVE-2026-119654 | HIGH | 8.8 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to … | 2026-10-30 |
| CVE-2026-119655 | HIGH | 7.5 | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageLis… | 2026-10-30 |
| CVE-2026-119656 | HIGH | 7.5 | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/G… | 2026-10-30 |
| CVE-2026-119657 | MEDIUM | 5.0 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows auth… | 2026-10-30 |
| CVE-2026-119658 | MEDIUM | 4.3 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User… | 2026-10-30 |
| CVE-2026-119659 | MEDIUM | 5.4 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to acces… | 2026-10-30 |
| CVE-2026-119660 | CRITICAL | 9.8 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to … | 2026-10-30 |
| CVE-2026-119661 | MEDIUM | 4.2 | ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries end… | 2026-10-30 |
| CVE-2026-119662 | HIGH | 8.8 | Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attac… | 2026-10-30 |
| CVE-2026-119663 | MEDIUM | 4.3 | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync A… | 2026-10-30 |
| CVE-2026-119664 | MEDIUM | 4.3 | Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync … | 2026-10-30 |
| CVE-2026-119665 | MEDIUM | 6.3 | WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskE… | 2026-10-30 |
| CVE-2026-119680 | NA | N/A | A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP… | 2026-10-30 |
| CVE-2026-119682 | NA | N/A | An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of Mana… | 2026-10-30 |
| CVE-2026-44344 | MEDIUM | 6.6 | Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line bef… | 2026-10-30 |
| CVE-2026-45141 | MEDIUM | 6.5 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `delete_gradebook_from_sk… | 2026-10-30 |
| CVE-2026-45144 | HIGH | 8.9 | Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{username}` is an… | 2026-10-30 |
| CVE-2026-45145 | HIGH | 7.5 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `public/main/inc/lib/career.lib.php`… | 2026-10-30 |
| CVE-2026-46499 | MEDIUM | 4.3 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and… | 2026-10-30 |
| CVE-2026-48164 | MEDIUM | 4.7 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and… | 2026-10-30 |
| CVE-2026-61626 | NA | N/A | libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle f… | 2026-10-30 |
| CVE-2026-61627 | NA | N/A | libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle… | 2026-10-30 |
| CVE-2026-61708 | HIGH | 8.5 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior … | 2026-10-30 |
| CVE-2026-61728 | CRITICAL | 9.9 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In aff… | 2026-10-30 |
| CVE-2026-61729 | CRITICAL | 9.4 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior … | 2026-10-30 |
| CVE-2026-61730 | CRITICAL | 9.3 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In aff… | 2026-10-30 |
| CVE-2026-61737 | CRITICAL | 9.8 | ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT… | 2026-10-30 |
| CVE-2026-61738 | CRITICAL | 10.0 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior … | 2026-10-30 |
| CVE-2026-61739 | HIGH | 7.5 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior … | 2026-10-30 |
| CVE-2026-65444 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative… | 2026-10-30 |
| CVE-2026-93327 | NA | N/A | A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integrat… | 2026-10-30 |
| CVE-2026-104061 | HIGH | 7.8 | Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that … | 2026-10-30 |
| CVE-2026-104062 | HIGH | 7.8 | Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin … | 2026-10-30 |
| CVE-2026-104063 | MEDIUM | 6.1 | Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plug… | 2026-10-30 |
| CVE-2026-104064 | HIGH | 7.8 | Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that a… | 2026-10-30 |
| CVE-2026-104065 | HIGH | 7.8 | Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin tha… | 2026-10-30 |
| CVE-2026-104066 | HIGH | 7.8 | Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plu… | 2026-10-30 |
| CVE-2026-104067 | HIGH | 7.8 | Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails … | 2026-10-30 |