| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-103509 | Credential Disclosure in P4 Search Configuration API | Perforce | P4 (Helix core) | High | 8.5 | 2026-10-15 14:41:29 | Deep Dive |
| CVE-2026-46694 | EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes | espocrm | espocrm | Medium | 6.5 | 2026-10-15 14:40:49 | Deep Dive |
| CVE-2026-79840 | HPE NonStop XABroker - Memory corruption vulnerability | Hewlett Packard Enterprise | HPE NonStop XABroker | High | 7.3 | 2026-10-15 14:36:19 | Deep Dive |
| CVE-2026-79839 | HPE NonStop ODBC/MX Server - Memory corruption vulnerability | Hewlett Packard Enterprise | HPE NonStop ODBC/MX Server | High | 7.3 | 2026-10-15 14:32:14 | Deep Dive |
| CVE-2026-79838 | HPE NonStop ODBC/MX Services - Memory corruption vulnerability | Hewlett Packard Enterprise | HPE NonStop ODBC/MX Services | High | 7.3 | 2026-10-15 14:24:54 | Deep Dive |
| CVE-2026-108116 | MDX and SOAP Injection in Kendo UI for jQuery | Progress Software | Kendo UI for jQuery | High | 7.5 | 2026-10-15 14:12:52 | Deep Dive |
| CVE-2026-106153 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 14:12:06 | Deep Dive |
| CVE-2026-106151 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 14:11:09 | Deep Dive |
| CVE-2026-106150 | Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 14:09:50 | Deep Dive |
| CVE-2026-106149 | Cross-site Scripting (XSS) in Kendo UI for jQuery Menu | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 14:08:44 | Deep Dive |
| CVE-2026-110746 | CVE-2026-110746 | TotalSecurity | TotalAV | - | - | 2026-10-15 14:08:27 | Deep Dive |
| CVE-2026-103508 | Path traversal via logging configuration in P4Search | Perforce | P4 (Helix core) | High | 7.3 | 2026-10-15 14:02:19 | Deep Dive |
| CVE-2026-9703 | Viewer role can create, modify and delete Loki alerting rules | Grafana | Grafana Enterprise | High | 7.1 | 2026-10-15 14:02:00 | Deep Dive |
| CVE-2026-110936 | Siemens Software Center 未受控搜索路径漏洞 | Siemens | Siemens Software Center | Medium | 6.7 | 2026-10-15 14:01:18 | Deep Dive |
| CVE-2026-104024 | Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation | PeaZip | PeaZip | Medium | 4.6 | 2026-10-15 13:30:14 | Deep Dive |
| CVE-2026-93649 | Eclipse Adoptium未授权重定向漏洞 | Eclipse Foundation | Adoptium Temurin | - | - | 2026-10-15 13:28:43 | Deep Dive |
| CVE-2026-106148 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 13:28:23 | Deep Dive |
| CVE-2026-106147 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 13:27:32 | Deep Dive |
| CVE-2026-106161 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 13:26:58 | Deep Dive |
| CVE-2026-106160 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery | Progress Software | Kendo UI for jQuery | Medium | 5.4 | 2026-10-15 13:24:33 | Deep Dive |