[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114258 | 21 Oct 2026 | CVSS 7.3 | oretnom23 file-management-system-phpA vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some… | |
| CVE-2026-113796 | 21 Oct 2026 | CVSS 4.2 | Electron: SameSite cookie restrictions are not applied to windows opened from linksElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0… | Fix |
| CVE-2026-113797 | 21 Oct 2026 | CVSS 3.1 | Electron: Extension tabs.query returns tab URLs and titles without the tabs permissionElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1… | Fix |
| CVE-2026-113798 | 21 Oct 2026 | CVSS 5.4 | Electron: Pointer lock permission requests can be attributed to the wrong frameElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0… | Fix |
| CVE-2026-114477 | 21 Oct 2026 | CVSS 4.3 | Progressive Robot Ltd hMailServerMissing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose… | |
| CVE-2026-114478 | 21 Oct 2026 | CVSS 5.9 | Progressive Robot Ltd hMailServerInsufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote… | |
| CVE-2026-114479 | 21 Oct 2026 | CVSS 5.8 | Progressive Robot Ltd hMailServerNot failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote… | |
| CVE-2026-114489 | 21 Oct 2026 | CVSS 8.1 | Progressive Robot Ltd hMailServerMissing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user… | |
| CVE-2026-114490 | 21 Oct 2026 | CVSS 7.8 | Progressive Robot Ltd hMailServerIncorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin… | |
| CVE-2026-114463 | 21 Oct 2026 | Not scored yet | Nous Research Hermes AgentThe webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives… | |
| CVE-2026-114470 | 21 Oct 2026 | CVSS 5.3 | Progressive Robot Ltd hMailServerCross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated… | |
| CVE-2026-114471 | 21 Oct 2026 | CVSS 4.7 | Progressive Robot Ltd hMailServerInsertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who… | |
| CVE-2026-114472 | 21 Oct 2026 | CVSS 3.7 | Progressive Robot Ltd hMailServerInsufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote… | |
| CVE-2026-114473 | 21 Oct 2026 | CVSS 5.0 | Progressive Robot Ltd hMailServerIncorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay… | |
| CVE-2026-114474 | 21 Oct 2026 | CVSS 5.9 | Progressive Robot Ltd hMailServerUse of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a… | |
| CVE-2026-114475 | 21 Oct 2026 | CVSS 6.5 | Progressive Robot Ltd hMailServerMissing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user… | |
| CVE-2026-114476 | 21 Oct 2026 | CVSS 7.5 | Progressive Robot Ltd hMailServerIncorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose… | |
| CVE-2026-114257 | 21 Oct 2026 | CVSS 7.3 | oretnom23 file-management-system-phpA security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this… | |
| CVE-2026-114370 | 21 Oct 2026 | CVSS 3.7 | Red Hat build of Apache Camel for Spring Boot 4A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the… | |
| CVE-2026-114462 | 21 Oct 2026 | CVSS 6.0 | Velneo vServerImproper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and… | |
| CVE-2026-114253 | 21 Oct 2026 | CVSS 6.3 | oretnom23 file-management-system-phpA vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the… | |
| CVE-2026-114254 | 21 Oct 2026 | CVSS 7.3 | oretnom23 file-management-system-phpA vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function… | |
| CVE-2026-114255 | 21 Oct 2026 | CVSS 7.3 | oretnom23 file-management-system-phpA security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function… | |
| CVE-2026-114256 | 21 Oct 2026 | CVSS 7.3 | oretnom23 file-management-system-phpA weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function… | |
| CVE-2026-113794 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible infinite loop when hitting EOF in standard xref tablepypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard… | Fix |
| CVE-2026-113795 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible large memory usage for streams with multiple filterspypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple… | Fix |
| CVE-2026-113791 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible large memory usage when parsing content streamspypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small… | Fix |
| CVE-2026-113792 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible infinite loop in PdfWriter.find_outline_itempypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline… | Fix |
| CVE-2026-113793 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible infinite loop when removing tree itemspypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item… | Fix |
| CVE-2026-113787 | 21 Oct 2026 | CVSS 6.1 | GitHubNewbie0 odf-kitodf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaScript. Starting in version… | |
| CVE-2026-113788 | 21 Oct 2026 | CVSS 9.4 | uselagoon lagoonLagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh` service in Lagoon core that… | |
| CVE-2026-113789 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible long runtimes/large memory usage when retrieving form fieldspypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes… | Fix |
| CVE-2026-113790 | 21 Oct 2026 | CVSS 6.0 | pypdf: Possible large memory usage when parsing arrays and dictionariespypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many… | Fix |
| CVE-2026-102484 | 21 Oct 2026 | CVSS 6.4 | ntpsecHeap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to… | |
| CVE-2026-102485 | 21 Oct 2026 | CVSS 5.2 | ntpsecOut-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data… | |
| CVE-2026-102486 | 21 Oct 2026 | CVSS 7.5 | ntpsecOut-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS… | |
| CVE-2025-60469 | 21 Oct 2026 | Not scored yet | VulnerabilityA NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers… | |
| CVE-2025-60476 | 21 Oct 2026 | Not scored yet | VulnerabilityA heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a… | |
| CVE-2026-102483 | 21 Oct 2026 | CVSS 7.5 | ntpsecReachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie… | |
| CVE-2026-98869 | 21 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static register liveness analysis As reported in the… | |
| CVE-2026-114251 | 21 Oct 2026 | CVSS 6.3 | itsourcecode Sales-and-Inventory-SystemA vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown… | |
| CVE-2026-114252 | 21 Oct 2026 | CVSS 6.3 | itsourcecode Sales-and-Inventory-SystemA vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an… | |
| CVE-2026-111848 | 21 Oct 2026 | CVSS 7.1 | Dylan Kuhn Geo MashupImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows… | |
| CVE-2026-111852 | 21 Oct 2026 | CVSS 9.3 | WPdreams Ajax Search LiteImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite… | |
| CVE-2026-112221 | 21 Oct 2026 | CVSS 7.1 | Brainstorm Force SureCartImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows… | |
| CVE-2026-113779 | 21 Oct 2026 | CVSS 8.8 | pfrest pfSense-pkg-RESTAPIThe pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation… | |
| CVE-2026-113786 | 21 Oct 2026 | CVSS 2.3 | pypdf: Unvalidated JPEG image data loadingpypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the… | Fix |
| CVE-2026-114250 | 21 Oct 2026 | CVSS 6.3 | itsourcecode Sales-and-Inventory-SystemA flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown… | |
| CVE-2026-111832 | 21 Oct 2026 | CVSS 10.0 | WP MailsterUnrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This… | |
| CVE-2026-111833 | 21 Oct 2026 | CVSS 7.5 | Bold Grid weFormsImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms weforms allows Path Traversal.This… | |
| CVE-2026-111834 | 21 Oct 2026 | CVSS 9.9 | Kitae Park Mang Board WPUnrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This… | |
| CVE-2026-111835 | 21 Oct 2026 | CVSS 6.5 | BjornTech Swish for WooCommerceMissing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access… | |
| CVE-2026-111837 | 21 Oct 2026 | CVSS 6.5 | Wasiliy Strecker Contest GalleryImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery… | |
| CVE-2026-111838 | 21 Oct 2026 | CVSS 7.1 | ThemeHunk CustomizerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk ThemeHunk Customizer… | |
| CVE-2026-111840 | 21 Oct 2026 | CVSS 7.1 | VideoWhisper.com Paid Videochat Turnkey SiteImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site… | |
| CVE-2025-60493 | 21 Oct 2026 | Not scored yet | VulnerabilityA segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial… | |
| CVE-2025-60497 | 21 Oct 2026 | CVSS 5.5 | VulnerabilityA segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service… | |
| CVE-2025-60478 | 21 Oct 2026 | Not scored yet | VulnerabilityA use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a… | |
| CVE-2025-60487 | 21 Oct 2026 | Not scored yet | VulnerabilityA segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial… | |
| CVE-2025-60490 | 21 Oct 2026 | Not scored yet | VulnerabilityA heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows… | |
| CVE-2025-60491 | 21 Oct 2026 | Not scored yet | VulnerabilityA heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial… | |
| CVE-2025-60492 | 21 Oct 2026 | CVSS 5.5 | VulnerabilityA stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of… | |
| CVE-2023-7356 | 21 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the… | |
| CVE-2026-114437 | 21 Oct 2026 | CVSS 4.8 | go-chi chiIn the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that… | |
| CVE-2026-114249 | 21 Oct 2026 | CVSS 7.3 | dhikshitha29 Insurance-Management-SystemA vulnerability was detected in dhikshitha29 Insurance-Management-System… | |
| CVE-2026-104948 | 21 Oct 2026 | CVSS 7.1 | EnterpriseDB WarehousePGWarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in… | |
| CVE-2026-104949 | 21 Oct 2026 | CVSS 2.3 | EnterpriseDB WarehousePGWarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in… | |
| CVE-2026-109618 | 21 Oct 2026 | CVSS 9.8 | Out-of-memory handling flaw in PHP can lead to remote code executionPHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly… | Fix |
| CVE-2026-109619 | 21 Oct 2026 | CVSS 8.1 | Stale memory references in PHP can lead to remote code executionPHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be… | Fix |
| CVE-2026-104947 | 21 Oct 2026 | CVSS 5.3 | EnterpriseDB WarehousePGWarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function… | |
| CVE-2025-60489 | 21 Oct 2026 | Not scored yet | VulnerabilityA NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to… | |
| CVE-2025-71438 | 21 Oct 2026 | Not scored yet | VulnerabilityAn out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of… | |
| CVE-2024-7478 | 21 Oct 2026 | CVSS 5.8 | WSO2 API ManagerWhen a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during… | |
| CVE-2025-0326 | 21 Oct 2026 | Not scored yet | WSO2 Identity ServerThe system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations such as… | |
| CVE-2025-60479 | 21 Oct 2026 | Not scored yet | VulnerabilityA NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a… | |
| CVE-2024-5563 | 21 Oct 2026 | CVSS 4.8 | WSO2 Identity ServerDue to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. This… | |
| CVE-2024-6423 | 21 Oct 2026 | CVSS 4.0 | WSO2 API ManagerThe product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows where it… | |
| CVE-2024-4989 | 21 Oct 2026 | CVSS 5.4 | WSO2 API ManagerThe callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by malicious actors. Exploitation… | |
| CVE-2024-5139 | 21 Oct 2026 | CVSS 6.1 | WSO2 Enterprise IntegratorThe Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads… | |
| CVE-2026-97313 | 21 Oct 2026 | CVSS 7.5 | ISC BIND 9A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion… | Fix |
| CVE-2026-94300 | 21 Oct 2026 | CVSS 8.1 | ISC BIND 9Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can… | Fix |
| CVE-2026-96888 | 21 Oct 2026 | CVSS 7.5 | ISC BIND 9A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing… | Fix |
| CVE-2026-90484 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCThe MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A… | |
| CVE-2026-86146 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCInconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache bRPC (version < 1.18.0) on… | |
| CVE-2026-86147 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCExternal control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all platforms allows remote… | |
| CVE-2026-86249 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCOn a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption on internal_port can be… | |
| CVE-2026-87849 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCThe Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values… | |
| CVE-2026-82231 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCA Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the server peer it talks to. When… | |
| CVE-2026-82425 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCA reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of… | |
| CVE-2026-82942 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCA data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process (denial of service) when RDMA… | |
| CVE-2026-82953 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCNULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash the… | |
| CVE-2026-84727 | 21 Oct 2026 | CVSS 5.4 | Apache Software Foundation Apache bRPCUse-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows a malicious RTMP peer to crash the… | |
| CVE-2026-84747 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCInterpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to bypass… | |
| CVE-2026-84748 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCImproper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public… | |
| CVE-2026-82210 | 21 Oct 2026 | Not scored yet | Apache Software Foundation Apache bRPCEnforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server… | |
| CVE-2026-82230 | 21 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache bRPCUncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server crash… | |
| CVE-2026-114405 | 21 Oct 2026 | CVSS 8.7 | Velneo vServerImproper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2. | |
| CVE-2026-114407 | 21 Oct 2026 | CVSS 6.1 | e107inc e107e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by… | |
| CVE-2026-19630 | 21 Oct 2026 | CVSS 7.5 | ISC BIND 9In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A… | |
| CVE-2026-114399 | 21 Oct 2026 | CVSS 6.5 | polonel trudeskTrudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded traversal… |
Page 8 of 168