CVE ID :CVE-2023-54403 Published : Sept. 30, 2026, 8:25 p.m. | 49 minutes ago Description :Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter…
CVE ID :CVE-2024-58387 Published : Sept. 30, 2026, 8:24 p.m. | 50 minutes ago Description :Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated…
CVE ID :CVE-2026-102115 Published : Sept. 30, 2026, 8:19 p.m. | 55 minutes ago Description :Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with…
CVE ID :CVE-2026-102120 Published : Sept. 30, 2026, 8:17 p.m. | 57 minutes ago Description :A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to…
CVE ID :CVE-2026-102121 Published : Sept. 30, 2026, 8:17 p.m. | 57 minutes ago Description :A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more…
CVE ID :CVE-2026-97291 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions. Severity: 8.8 | HIGH Visit the link for more details,…
CVE ID :CVE-2026-87004 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend decodes the id_token returned…
CVE ID :CVE-2026-55094 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Taskcluster is the task execution framework that supports Mozilla’s continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster…
CVE ID :CVE-2026-55107 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user formulas, student submissions, third-party…
CVE ID :CVE-2026-55224 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other…