[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-58391 | 15 Oct 2026 | CVSS 5.4 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and… | |
| CVE-2026-58392 | 15 Oct 2026 | CVSS 5.4 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in… | |
| CVE-2026-58393 | 15 Oct 2026 | CVSS 5.9 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field accepts… | |
| CVE-2026-58394 | 15 Oct 2026 | CVSS 5.2 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_admin.php reads certificate records into… | |
| CVE-2026-58395 | 15 Oct 2026 | CVSS 4.3 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through… | |
| CVE-2026-57155 | 15 Oct 2026 | CVSS 9.9 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and… | |
| CVE-2026-58390 | 15 Oct 2026 | CVSS 8.0 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in… | |
| CVE-2026-52167 | 15 Oct 2026 | Not scored yet | VulnerabilityA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted… | |
| CVE-2026-53582 | 15 Oct 2026 | CVSS 7.1 | opnsense coreOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate… | |
| CVE-2026-45450 | 15 Oct 2026 | CVSS 8.3 | Unitronics UniStream Pro/UniLogic: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue… | |
| CVE-2026-45451 | 15 Oct 2026 | CVSS 8.3 | Unitronics UniStream Pro/UniLogic: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic… | |
| CVE-2026-45452 | 15 Oct 2026 | CVSS 8.3 | Unitronics UniStream Pro/UniLogicUse of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream… | |
| CVE-2026-45449 | 15 Oct 2026 | CVSS 8.3 | Unitronics UniStream Pro/UniLogic: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream… | |
| CVE-2026-111095 | 15 Oct 2026 | CVSS 5.4 | JetBrains TeamCityIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible | |
| CVE-2026-111096 | 15 Oct 2026 | CVSS 5.4 | JetBrains TeamCityIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible | |
| CVE-2026-110958 | 15 Oct 2026 | CVSS 10.0 | Wavlink WN530HG4BA vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation… | |
| CVE-2026-111091 | 15 Oct 2026 | CVSS 7.8 | JetBrains Junie CLIIn JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration | |
| CVE-2026-111092 | 15 Oct 2026 | CVSS 6.5 | JetBrains YouTrackIn JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue… | |
| CVE-2026-111093 | 15 Oct 2026 | CVSS 7.5 | JetBrains DataloreIn JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files | |
| CVE-2026-111094 | 15 Oct 2026 | CVSS 9.8 | JetBrains TeamCityIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible | |
| CVE-2026-109449 | 15 Oct 2026 | CVSS 8.7 | sensiolabs symfonyIn Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node… | Fix |
| CVE-2026-105474 | 15 Oct 2026 | CVSS 9.4 | WebPros SolusVM 2A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as… | |
| CVE-2026-100351 | 15 Oct 2026 | CVSS 7.4 | kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusionkin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected… | Fix |
| CVE-2026-100352 | 15 Oct 2026 | CVSS 7.5 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Pathkin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values… | Fix |
| CVE-2026-100347 | 15 Oct 2026 | CVSS 5.3 | kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static pathkin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which… | Fix |
| CVE-2026-100348 | 15 Oct 2026 | CVSS 5.3 | kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a… | Fix |
| CVE-2026-100349 | 15 Oct 2026 | CVSS 8.2 | kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with contentkin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse passes a nil response header schema to… | Fix |
| CVE-2026-100350 | 15 Oct 2026 | CVSS 5.3 | kin-openapi deepObject query decoding repeatedly compiles an invariant regular expressionkin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter repeatedly calls regexp.MustCompile for the same… | Fix |
| CVE-2026-9703 | 15 Oct 2026 | CVSS 7.1 | Grafana EnterpriseGrafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer… | |
| CVE-2026-79843 | 15 Oct 2026 | CVSS 6.5 | Hewlett Packard Enterprise HPE NonStop SQL/MX EXEA corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure… | |
| CVE-2026-95179 | 15 Oct 2026 | CVSS 7.5 | VulnerabilityAn issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON… | |
| CVE-2026-95180 | 15 Oct 2026 | CVSS 5.5 | VulnerabilityAn issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host… | |
| CVE-2026-79838 | 15 Oct 2026 | CVSS 7.3 | Hewlett Packard Enterprise HPE NonStop ODBC/MX ServicesA buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash. | |
| CVE-2026-79839 | 15 Oct 2026 | CVSS 7.3 | Hewlett Packard Enterprise HPE NonStop ODBC/MX ServerA buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash. | |
| CVE-2026-79840 | 15 Oct 2026 | CVSS 7.3 | Hewlett Packard Enterprise HPE NonStop XABrokerA buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash. | |
| CVE-2026-79841 | 15 Oct 2026 | CVSS 5.8 | Hewlett Packard Enterprise HPE NonStop RDMA SERVICES NSKA buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption. | |
| CVE-2026-59994 | 15 Oct 2026 | CVSS 4.3 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.9, an unauthenticated remote attacker can send an email to a… | |
| CVE-2026-63130 | 15 Oct 2026 | CVSS 5.5 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to… | |
| CVE-2026-77460 | 15 Oct 2026 | CVSS 6.5 | espocrmEspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email… | |
| CVE-2026-53574 | 15 Oct 2026 | CVSS 7.6 | espocrmEspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an authenticated non-administrator can submit a… | |
| CVE-2026-53575 | 15 Oct 2026 | CVSS 2.7 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authenticated administrator can place crafted content in… | |
| CVE-2026-55154 | 15 Oct 2026 | CVSS 5.4 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/Espo/Tools/Export/Format/Csv/Processor.php… | |
| CVE-2026-55184 | 15 Oct 2026 | CVSS 3.5 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission… | |
| CVE-2026-46691 | 15 Oct 2026 | CVSS 6.5 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST… | |
| CVE-2026-46694 | 15 Oct 2026 | CVSS 6.5 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.7, a portal user with stream access to a parent record can… | |
| CVE-2026-46708 | 15 Oct 2026 | CVSS 4.3 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privileged user who can access a shared TargetList can… | |
| CVE-2026-47168 | 15 Oct 2026 | CVSS 9.1 | espocrmEspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized… | |
| CVE-2026-110936 | 15 Oct 2026 | CVSS 6.7 | DLL search path flaw in Siemens Software CenterA vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries… | ExploitedFix |
| CVE-2026-110957 | 15 Oct 2026 | CVSS 10.0 | Wavlink WL-WN530BE2-AA vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of… | |
| CVE-2026-110746 | 15 Oct 2026 | CVSS 7.8 | TotalSecurity TotalAVA local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading… | |
| CVE-2026-109413 | 15 Oct 2026 | CVSS 8.7 | sensiolabs symfonyIn Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and… | Fix |
| CVE-2026-106150 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.804 and the Tooltip component… | |
| CVE-2026-106151 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator decodes validation messages from… | |
| CVE-2026-106153 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and… | |
| CVE-2026-108082 | 15 Oct 2026 | CVSS 8.7 | sensiolabs symfonySymfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and… | Fix |
| CVE-2026-108116 | 15 Oct 2026 | CVSS 7.5 | Progress Software Kendo UI for jQueryIn Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or… | |
| CVE-2026-104586 | 15 Oct 2026 | CVSS 9.8 | VulnerabilityAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi. | |
| CVE-2026-106149 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string… | |
| CVE-2026-103508 | 15 Oct 2026 | CVSS 7.3 | Perforce P4 (Helix core)P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted… | |
| CVE-2026-103509 | 15 Oct 2026 | CVSS 8.5 | Perforce P4 (Helix core)P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on… | |
| CVE-2026-93649 | 15 Oct 2026 | CVSS 7.5 | Eclipse Foundation Adoptium TemurinIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf… | |
| CVE-2026-106163 | 15 Oct 2026 | CVSS 6.5 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the FileBrowser and ImageBrowser components render… | |
| CVE-2026-106147 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bound… | |
| CVE-2026-106148 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert data source imageUrl values into… | |
| CVE-2026-106157 | 15 Oct 2026 | CVSS 4.7 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar component inserts data source item URL… | |
| CVE-2026-106158 | 15 Oct 2026 | CVSS 4.7 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda views insert resource color values into… | |
| CVE-2026-106159 | 15 Oct 2026 | CVSS 4.7 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into… | |
| CVE-2026-106160 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes server-response keys to kendo.setter without guarding against unsafe… | |
| CVE-2026-106161 | 15 Oct 2026 | CVSS 5.4 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw… | |
| CVE-2026-106162 | 15 Oct 2026 | CVSS 4.7 | Progress Software Kendo UI for jQueryIn Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior to 2026.3.1015, the FileManager component renders remotely supplied… | |
| CVE-2026-104024 | 15 Oct 2026 | CVSS 4.6 | PeaZipIncomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in… | |
| CVE-2026-99999 | 15 Oct 2026 | CVSS 9.3 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad… | |
| CVE-2026-79837 | 15 Oct 2026 | CVSS 7.3 | Hewlett Packard Enterprise HPE NonStop SQL/MX UDR SERVERA vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption… | |
| CVE-2026-88794 | 15 Oct 2026 | CVSS 8.2 | Sparx Systems Enterprise ArchitectEnterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file… | |
| CVE-2026-98432 | 15 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock()… | |
| CVE-2026-109692 | 15 Oct 2026 | CVSS 7.1 | ThemeGrill User RegistrationMissing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-109693 | 15 Oct 2026 | CVSS 8.8 | WP ManageNinja LLC Fluent CRMIncorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM… | |
| CVE-2026-109698 | 15 Oct 2026 | CVSS 9.3 | Kitae Park Mang Board WPImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL… | |
| CVE-2026-109702 | 15 Oct 2026 | CVSS 7.1 | maxfoundry Social Share ButtonsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-button… | |
| CVE-2026-109892 | 15 Oct 2026 | CVSS 9.8 | Shabti Kaplan Frontend Admin by DynamiAppsIncorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This… | |
| CVE-2026-110723 | 15 Oct 2026 | CVSS 7.5 | Eclipse Foundation Eclipse Connected Services PlatformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the… | |
| CVE-2026-110724 | 15 Oct 2026 | CVSS 7.5 | Eclipse Foundation Eclipse Connected Services PlatformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the… | |
| CVE-2026-109685 | 15 Oct 2026 | CVSS 7.1 | Link Whisper INC Link Whisper FreeImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper INC Link Whisper Free link-whisper… | |
| CVE-2026-109686 | 15 Oct 2026 | CVSS 9.8 | Link Whisper INC Link Whisper FreeDeserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link… | |
| CVE-2026-109688 | 15 Oct 2026 | CVSS 9.3 | Link Whisper INC Link Whisper FreeImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper… | |
| CVE-2026-102389 | 15 Oct 2026 | CVSS 6.5 | WPMU DEV Broken Link CheckerImproper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code… | |
| CVE-2026-104025 | 15 Oct 2026 | CVSS 8.4 | PeaZipPath Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an… | |
| CVE-2026-105882 | 15 Oct 2026 | CVSS 6.5 | ThemeGrill User RegistrationImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration… | |
| CVE-2026-107416 | 15 Oct 2026 | CVSS 7.5 | Webba Plugins Webba BookingAuthorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly… | |
| CVE-2026-79834 | 15 Oct 2026 | CVSS 7.4 | Hewlett Packard Enterprise HPE NonStop SQL/MX SQLCATA security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution. | |
| CVE-2026-79835 | 15 Oct 2026 | CVSS 2.8 | Hewlett Packard Enterprise HPE Nonstop KMS ServerA crafted input message can cause a buffer overflow in HPE Nonstop KMS Server. | |
| CVE-2026-79836 | 15 Oct 2026 | CVSS 6.4 | Hewlett Packard Enterprise HPE NonStop SQL/MX Run-Time StatisticsA vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially… | |
| CVE-2026-8145 | 15 Oct 2026 | CVSS 5.4 | wpxpo WholesaleX – All-in-One B2B Solution with Wholesale PricingThe WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in… | |
| CVE-2026-110726 | 15 Oct 2026 | CVSS 6.5 | Eclipse Foundation Eclipse Connected Services PlatformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the… | |
| CVE-2026-79830 | 15 Oct 2026 | CVSS 6.6 | Hewlett Packard Enterprise HPE NonStop Kernel Level Thread Model LibA vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution. | |
| CVE-2026-79831 | 15 Oct 2026 | CVSS 6.6 | Hewlett Packard Enterprise HPE NonStop Posix User ThreadsA heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. | |
| CVE-2026-79832 | 15 Oct 2026 | CVSS 7.6 | Hewlett Packard Enterprise HPE NonStop SQL/MX ExecutorA stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. | |
| CVE-2026-79833 | 15 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise HPE NonStop ANSI SQLUTILA vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing… | |
| CVE-2026-17525 | 15 Oct 2026 | CVSS 5.2 | ABB My Control SystemIncomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5. | |
| CVE-2026-109695 | 15 Oct 2026 | CVSS 7.5 | WPManageNinja FluentCartInsertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This… |
Page 49 of 168