| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-94204 | Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application | Viidure | Dashcam Android Application | High | 7.5 | 2026-09-29 20:40:53 | Deep Dive |
| CVE-2026-81841 | Paused shared dashboard access tokens still expose data source configuration | Grafana | Grafana Enterprise | Medium | 5.3 | 2026-09-29 20:35:57 | Deep Dive |
| CVE-2026-102620 | Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow | Freedesktop | Poppler | Low | 3.3 | 2026-09-29 20:30:15 | Deep Dive |
| CVE-2026-102253 | iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS | esnet | iperf3 | High | 7.5 | 2026-09-29 20:11:47 | Deep Dive |
| CVE-2026-102879 | ClaraVerse through 0.3.1 SSRF Protection Bypass | claraverse-space | ClaraVerse | Medium | 5.0 | 2026-09-29 20:01:09 | Deep Dive |
| CVE-2026-102878 | mcp-chrome-bridge through 1.0.31 CORS Origin Bypass | hangwin | mcp-chrome-bridge | High | 8.1 | 2026-09-29 20:01:08 | Deep Dive |
| CVE-2026-102877 | Fider before 0.38.0 SSRF via DNS rebinding in webhook validation | getfider | fider | Medium | 4.4 | 2026-09-29 20:01:07 | Deep Dive |
| CVE-2026-102876 | SurrealDB before 3.3.0 Cross-Tenant Access via Headers | surrealdb | surrealdb | High | 8.1 | 2026-09-29 20:01:06 | Deep Dive |
| CVE-2026-102875 | VLC media player before 3.0.24 Path Traversal via skins2 | videolan | vlc | High | 7.8 | 2026-09-29 20:01:05 | Deep Dive |
| CVE-2026-53988 | Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints | Finsys | dockhand | Critical | 10.0 | 2026-09-29 19:55:59 | Deep Dive |
| CVE-2026-100299 | Use of Weak Credentials in Anjvision YSSD-RTMP-H5 | Anjvision | YSSD-RTMP-H5 | Medium | 6.8 | 2026-09-29 19:52:15 | Deep Dive |
| CVE-2026-100298 | Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5 | Anjvision | YSSD-RTMP-H5 | High | 8.8 | 2026-09-29 19:50:40 | Deep Dive |
| CVE-2026-100297 | Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5 | Anjvision | YSSD-RTMP-H5 | Medium | 5.3 | 2026-09-29 19:48:42 | Deep Dive |
| CVE-2026-100296 | Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5 | Anjvision | YSSD-RTMP-H5 | High | 8.1 | 2026-09-29 19:46:36 | Deep Dive |
| CVE-2026-102305 | Chrome iOS 154前SignIn UI伪造漏洞 | Chrome | - | - | 2026-09-29 19:45:08 | Deep Dive | |
| CVE-2026-102320 | Chrome 154前CORS授权缺失致跨域策略绕过 | Chrome | - | - | 2026-09-29 19:45:07 | Deep Dive | |
| CVE-2026-102310 | Chrome 154前支付缺失授权漏洞 | Chrome | - | - | 2026-09-29 19:45:07 | Deep Dive | |
| CVE-2026-102330 | Chrome 154.0.8037.92前SiteIsolation授权错误 | Chrome | - | - | 2026-09-29 19:45:07 | Deep Dive | |
| CVE-2026-102314 | Chrome 154.0.8037.92 之前 TabStrip 界面欺骗漏洞 | Chrome | - | - | 2026-09-29 19:45:07 | Deep Dive | |
| CVE-2026-102327 | Chrome Android 154.0.8037.92前WebView授权不当漏洞 | Chrome | - | - | 2026-09-29 19:45:07 | Deep Dive |