CVE ID :CVE-2016-20101 Published : Oct. 20, 2026, 8:31 p.m. | 57 minutes ago Description :Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the ‘abspath’…
CVE ID :CVE-2015-20128 Published : Oct. 20, 2026, 8:31 p.m. | 57 minutes ago Description :FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET…
CVE ID :CVE-2026-35499 Published : Oct. 20, 2026, 8:25 p.m. | 1 hour, 3 minutes ago Description :An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary…
CVE ID :CVE-2026-111767 Published : Oct. 20, 2026, 6:28 p.m. | 59 minutes ago Description :MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature…
CVE ID :CVE-2026-100134 Published : Oct. 20, 2026, 6:18 p.m. | 1 hour, 9 minutes ago Description :Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE ID :CVE-2026-75751 Published : Oct. 20, 2026, 6:18 p.m. | 1 hour, 9 minutes ago Description :Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE ID :CVE-2026-48279 Published : Oct. 20, 2026, 6:18 p.m. | 1 hour, 9 minutes ago Description :Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE ID :CVE-2026-75747 Published : Oct. 20, 2026, 6:18 p.m. | 1 hour, 9 minutes ago Description :Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
CVE ID :CVE-2026-76788 Published : Oct. 19, 2026, 8:39 p.m. | 41 minutes ago Description :The OSDP Control Panel reply parser cp_decode_response() in subsys decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For the REPLY_KEYPPAD and REPLY_RAW reply…
CVE ID :CVE-2026-82166 Published : Oct. 19, 2026, 8:20 p.m. | 1 hour ago Description :Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this…