Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118698 | medium | 6.5 | No | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'pgro... | 2026-10-30 |
| CVE-2026-114501 | medium | 5.3 | No | Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports f... | 2026-10-30 |
| CVE-2026-108780 | medium | 6.5 | No | Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are ope... | 2026-10-30 |
| CVE-2026-108776 | medium | 5.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact is moderate i... | 2026-10-30 |
| CVE-2026-108771 | critical | 9.8 | No | Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin servic... | 2026-10-30 |
| CVE-2026-108766 | medium | 6.5 | No | Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public ne... | 2026-10-30 |
| CVE-2026-108764 | medium | 6.5 | No | Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public n... | 2026-10-30 |
| CVE-2026-104368 | high | 8.8 | No | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2... | 2026-10-30 |
| CVE-2026-107929 | high | 8.1 | No | When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifho... | 2026-10-30 |
| CVE-2026-107928 | high | 8.1 | No | When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds... | 2026-10-30 |
| CVE-2026-108762 | high | 7.3 | No | Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to publ... | 2026-10-30 |
| CVE-2026-103672 | high | 7.1 | No | The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload... | 2026-10-30 |
| CVE-2024-7557 | high | 8.8 | No | A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same names... | 2026-10-30 |
| CVE-2024-5563 | medium | 4.8 | No | Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. Thi... | 2026-10-30 |
| CVE-2024-5139 | medium | 6.1 | No | The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payl... | 2026-10-30 |
| CVE-2024-4989 | medium | 5.4 | No | The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by malicious actors. Exp... | 2026-10-30 |
| CVE-2013-2056 | high | 7.5 | No | A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does no... | 2026-10-30 |
| CVE-2012-5562 | high | 8.6 | No | A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Sa... | 2026-10-30 |
| CVE-2026-61739 | high | 7.5 | No | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Si... | 2026-10-30 |
| CVE-2026-61730 | critical | 9.3 | No | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthe... | 2026-10-30 |