Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-0750 | medium | 6.6 | No | A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow... | 2026-10-30 |
| CVE-2024-9341 | high | 8.2 | No | A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper... | 2026-10-30 |
| CVE-2013-1840 | medium | 6.5 | No | A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single... | 2026-10-30 |
| CVE-2013-1815 | medium | 6.1 | No | A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is creat... | 2026-10-30 |
| CVE-2013-0266 | medium | 5.5 | No | A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifica... | 2026-10-30 |
| CVE-2013-0261 | high | 8.8 | No | A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directo... | 2026-10-30 |
| CVE-2012-5605 | low | 3.3 | No | A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due t... | 2026-10-30 |
| CVE-2012-5625 | medium | 6.5 | No | OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical v... | 2026-10-30 |
| CVE-2012-3427 | medium | 5.5 | No | A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var... | 2026-10-30 |
| CVE-2012-4574 | medium | 5.5 | No | A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to w... | 2026-10-30 |
| CVE-2012-5571 | medium | 5.4 | No | A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions.... | 2026-10-30 |
| CVE-2011-4346 | medium | 4.6 | No | Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject... | 2026-10-30 |
| CVE-2026-119549 | high | 7.1 | No | Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass SvgSecurityValidator by embe... | 2026-10-30 |
| CVE-2026-119414 | medium | 4.3 | No | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization membe... | 2026-10-30 |
| CVE-2026-119418 | high | 8.1 | No | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and... | 2026-10-30 |
| CVE-2026-119417 | low | 3.7 | No | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header injection vulnera... | 2026-10-30 |
| CVE-2026-119364 | medium | 5.3 | No | ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy that allows authenticated FTP use... | 2026-10-30 |
| CVE-2026-48382 | critical | 10.0 | No | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the contex... | 2026-10-30 |
| CVE-2026-101986 | critical | 9.8 | No | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attack... | 2026-10-30 |
| CVE-2026-101990 | critical | 9.8 | No | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a... | 2026-10-30 |