Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-119251 | medium | 6.7 | No | A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for... | 2026-10-30 |
| CVE-2026-103094 | not reported | — | No | ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability coul... | 2026-10-30 |
| CVE-2026-103093 | not reported | — | No | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable... | 2026-10-30 |
| CVE-2026-63917 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_changelink(). ip netns add ns1 ip ne... | 2026-10-30 |
| CVE-2026-63963 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers... | 2026-10-30 |
| CVE-2026-63962 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_mo... | 2026-10-30 |
| CVE-2026-63964 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record head... | 2026-10-30 |
| CVE-2026-63965 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp580... | 2026-10-30 |
| CVE-2026-63966 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550_trigg... | 2026-10-30 |
| CVE-2026-63967 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer The tagged... | 2026-10-30 |
| CVE-2026-63968 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_path() Found while aud... | 2026-10-30 |
| CVE-2026-119466 | medium | 5.4 | No | Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site Request Forgery.T... | 2026-10-30 |
| CVE-2026-119369 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Cale... | 2026-10-30 |
| CVE-2026-116407 | medium | 5.4 | No | Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Contro... | 2026-10-30 |
| CVE-2026-119280 | low | 3.7 | No | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5... | 2026-10-30 |
| CVE-2026-119276 | medium | 5.9 | No | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5... | 2026-10-30 |
| CVE-2026-119201 | medium | 4.8 | No | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in /app-secret, b... | 2026-10-30 |
| CVE-2026-119199 | medium | 5.9 | No | Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 deve... | 2026-10-30 |
| CVE-2026-119197 | high | 7.5 | No | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a... | 2026-10-30 |
| CVE-2026-119195 | high | 7.5 | No | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates... | 2026-10-30 |