[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112262 | 19 Oct 2026 | CVSS 7.1 | risingwavelabs risingwaveRisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files… | |
| CVE-2026-112263 | 19 Oct 2026 | CVSS 7.8 | alexpasmantier televisionTelevision (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly… | |
| CVE-2026-111935 | 19 Oct 2026 | CVSS 2.6 | codexu NoteGenNoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files… | |
| CVE-2026-111936 | 19 Oct 2026 | CVSS 4.3 | aleksey-hoffman Sigma File ManagerSigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks… | |
| CVE-2026-111937 | 19 Oct 2026 | CVSS 5.4 | frappe crmFrappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification… | |
| CVE-2026-111938 | 19 Oct 2026 | CVSS 4.3 | frappe crmFrappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other users' call logs by… | |
| CVE-2026-111939 | 19 Oct 2026 | CVSS 4.6 | frappe helpdeskFrappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating… | |
| CVE-2026-112143 | 19 Oct 2026 | CVSS 7.3 | satya-vinay Events-Management-SystemA security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is… | |
| CVE-2026-112144 | 19 Oct 2026 | CVSS 5.3 | satya-vinay Events-Management-SystemA weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part… | |
| CVE-2026-111828 | 19 Oct 2026 | CVSS 4.3 | Mamunur Rashid Classified ListingImproper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing… | |
| CVE-2026-111829 | 19 Oct 2026 | CVSS 6.5 | WP MailsterImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Mailster WP Mailster… | |
| CVE-2026-111883 | 19 Oct 2026 | CVSS 5.4 | locustio locustLocust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET… | |
| CVE-2026-111899 | 19 Oct 2026 | CVSS 4.3 | TomBursch kitchenowlKitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated household members to bypass… | |
| CVE-2026-111915 | 19 Oct 2026 | CVSS 5.9 | purocean Yank NoteYank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or… | |
| CVE-2026-111925 | 19 Oct 2026 | CVSS 5.3 | MopidyMopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because… | |
| CVE-2026-110008 | 19 Oct 2026 | CVSS 4.2 | @fastify/oauth2@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier cookies are set without a… | |
| CVE-2026-110902 | 19 Oct 2026 | CVSS 4.3 | Liquid Web / StellarWP Event TicketsAuthorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly… | |
| CVE-2026-38671 | 19 Oct 2026 | CVSS 6.1 | VulnerabilityCross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior (no fixed version… | |
| CVE-2026-112141 | 19 Oct 2026 | CVSS 7.3 | satya-vinay Events-Management-SystemA vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function… | |
| CVE-2026-112142 | 19 Oct 2026 | CVSS 7.3 | satya-vinay Events-Management-SystemA vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability… | |
| CVE-2026-112199 | 19 Oct 2026 | CVSS 6.5 | YITH WooCommerce WishlistImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist… | |
| CVE-2026-112214 | 19 Oct 2026 | CVSS 6.5 | Red Hat Enterprise Linux 10A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to… | |
| CVE-2026-111831 | 19 Oct 2026 | CVSS 5.3 | WP ManageNinja LLC FluentFormMissing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-111836 | 19 Oct 2026 | CVSS 4.3 | WP ManageNinja LLC FluentCommunityMissing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-111839 | 19 Oct 2026 | CVSS 5.3 | VideoWhisper.com Broadcast Live VideoMissing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly… | |
| CVE-2026-111845 | 19 Oct 2026 | CVSS 5.3 | YITH WooCommerce Product BundlesMissing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly… | |
| CVE-2026-110363 | 19 Oct 2026 | CVSS 5.4 | ThimPress LearnPressMissing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-111410 | 19 Oct 2026 | CVSS 6.5 | E2Pdf.com e2pdfImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This… | |
| CVE-2026-111414 | 19 Oct 2026 | CVSS 6.5 | Crocoblock JetElements For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor… | |
| CVE-2026-103314 | 19 Oct 2026 | CVSS 7.4 | Red Hat Advanced Cluster Security for Kubernetes 4.11A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML… | |
| CVE-2026-88900 | 19 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache CamelDeserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… | |
| CVE-2026-112108 | 19 Oct 2026 | CVSS 6.3 | ztxz16 fastllmA vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file… | |
| CVE-2026-112138 | 19 Oct 2026 | CVSS 4.7 | diem-project diemA flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file… | |
| CVE-2026-112139 | 19 Oct 2026 | CVSS 7.3 | subhajitkhan online-clinic-management-systemA vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an… | |
| CVE-2026-112140 | 19 Oct 2026 | CVSS 6.3 | llSourcell Doctor-DignityA vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of… | |
| CVE-2026-112210 | 19 Oct 2026 | CVSS 6.0 | Red Hat Enterprise Linux 10A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory… | |
| CVE-2026-112107 | 19 Oct 2026 | CVSS 6.3 | ztxz16 fastllmA flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of… | |
| CVE-2026-85317 | 19 Oct 2026 | CVSS 4.8 | Apache Software Foundation Apache CamelUse of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-88901 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Restriction of XML External Entity Reference vulnerability in Apache Camel. This issue affects Apache Camel: from 4.7.0 before 4.18.5, from… | |
| CVE-2026-91858 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelFopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance()… | |
| CVE-2026-85296 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelExposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… | |
| CVE-2026-85300 | 19 Oct 2026 | CVSS 5.5 | Apache Software Foundation Apache CamelIncorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0… | |
| CVE-2026-85301 | 19 Oct 2026 | CVSS 4.8 | Apache Software Foundation Apache CamelImproper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0… | |
| CVE-2026-85312 | 19 Oct 2026 | CVSS 4.8 | Apache Software Foundation Apache CamelImproper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85313 | 19 Oct 2026 | CVSS 4.3 | Apache Software Foundation Apache CamelPermissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85314 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelImproper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85315 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from… | |
| CVE-2026-85316 | 19 Oct 2026 | CVSS 4.8 | Apache Software Foundation Apache CamelInsufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-85249 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelImproper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85250 | 19 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CamelImproper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85251 | 19 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CamelExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85254 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelImproper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-85257 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85260 | 19 Oct 2026 | CVSS 5.5 | Apache Software Foundation Apache CamelInsertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-84180 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from… | |
| CVE-2026-84181 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelImproper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85243 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelImproper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-85245 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelExposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… | |
| CVE-2026-85246 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from… | |
| CVE-2026-85247 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelImproper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from… | |
| CVE-2026-85248 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component. This issue… | |
| CVE-2026-80312 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-80343 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… | |
| CVE-2026-80344 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelServer-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from… | |
| CVE-2026-83531 | 19 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache CamelImproper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement… | |
| CVE-2026-84176 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelPermissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel… | |
| CVE-2026-84178 | 19 Oct 2026 | CVSS 6.1 | Apache Software Foundation Apache CamelCross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from… | |
| CVE-2026-79983 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache… | |
| CVE-2026-79984 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects… | |
| CVE-2026-79985 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache… | |
| CVE-2026-79986 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue… | |
| CVE-2026-78162 | 19 Oct 2026 | CVSS 10.0 | Apache Software Foundation Apache CamelDeserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-78163 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelServer-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive… | |
| CVE-2026-78164 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in… | |
| CVE-2026-78165 | 19 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache CamelDeserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5… | |
| CVE-2026-71253 | 19 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache JohnzonUse of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon. ClassConverter loads &… | |
| CVE-2026-112105 | 19 Oct 2026 | CVSS 3.7 | GlitterWare PassyA vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/main.dart… | |
| CVE-2026-112106 | 19 Oct 2026 | CVSS 3.7 | TufayelLUS TikTok-Video-Downloader-PHPA security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this… | |
| CVE-2026-112103 | 19 Oct 2026 | CVSS 3.7 | f3-factory fatfree-coreA vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function _curl of the file web.php of the… | |
| CVE-2026-112104 | 19 Oct 2026 | CVSS 7.3 | eremef bandcamp-playerA flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the… | |
| CVE-2026-79613 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache Answervulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with… | |
| CVE-2026-79620 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerExposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper… | |
| CVE-2026-79624 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerInsufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation… | |
| CVE-2026-79633 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache Answervulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform… | |
| CVE-2026-86589 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerIncorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A flaw in the… | |
| CVE-2026-90910 | 19 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache AnswerMissing authentication for critical function vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The reaction API did… | |
| CVE-2026-64943 | 19 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache AnswerInsertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are… | |
| CVE-2026-64944 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer. This issue affects Apache… | |
| CVE-2026-64945 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerA vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show operations on… | |
| CVE-2026-67249 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerA vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A verification code issued for one email-based workflow could be… | |
| CVE-2026-68482 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerMissing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can… | |
| CVE-2026-71563 | 19 Oct 2026 | CVSS 4.3 | Apache Software Foundation Apache AnswerMissing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer… | |
| CVE-2026-76994 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2… | |
| CVE-2026-112184 | 19 Oct 2026 | CVSS 4.8 | MISPMISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules… | |
| CVE-2026-112188 | 19 Oct 2026 | CVSS 7.1 | MISPMISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that… | |
| CVE-2026-112192 | 19 Oct 2026 | CVSS 5.3 | MISPMISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it… | |
| CVE-2026-111406 | 19 Oct 2026 | CVSS 9.9 | PT Norther Lights Production MapSVGUnrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows… | |
| CVE-2026-111407 | 19 Oct 2026 | CVSS 6.5 | Themeum Tutor LMSImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This… | |
| CVE-2026-111408 | 19 Oct 2026 | CVSS 8.8 | ExpressTech Quiz And Survey MasterDeserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects… | |
| CVE-2026-112100 | 19 Oct 2026 | CVSS 5.5 | DeepPavlovA vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.__init__ of the file… |
Page 33 of 168