Known Vulnerabilities for Comments by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "Comments" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103289 json | Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members t... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103274 json | Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visi... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-102422 json | shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the ... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102373 json | GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-100699 json | Nodemailer is a Node.js email-sending library. In versions >= 9.1.0 and < 10.0.9, the address parser (src/addressparser) mish... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100672 json | The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers an admin handler that return... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100278 json | In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-100268 json | In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification tem... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-97863 json | The cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh) that authenticates to and c... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-97499 json | In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event dat... | Not Provided | 2026-09-24 | 2026-09-28 |