Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-19721 | low | 3.3 | No | Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allow... | 2026-11-04 |
| CVE-2026-114426 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without... | 2026-11-04 |
| CVE-2026-114425 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An u... | 2026-11-04 |
| CVE-2026-114424 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacemen... | 2026-11-04 |
| CVE-2026-114421 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is... | 2026-11-04 |
| CVE-2026-114420 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GIN... | 2026-11-04 |
| CVE-2026-108946 | not reported | — | No | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The ActiveMQ broker resolves connection, session and co... | 2026-11-04 |
| CVE-2026-108500 | not reported | — | No | Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an authenticated attacker to creat... | 2026-11-04 |
| CVE-2026-103582 | not reported | — | No | Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package Apache.NMS.ActiveMQ)... | 2026-11-04 |
| CVE-2026-100235 | not reported | — | No | Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of Apache ZooKeeper. W... | 2026-11-04 |
| CVE-2026-111822 | not reported | — | No | Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configur... | 2026-11-04 |
| CVE-2026-111821 | not reported | — | No | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientI... | 2026-11-04 |
| CVE-2026-119084 | high | 8.1 | No | Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an ac... | 2026-11-04 |
| CVE-2026-121652 | medium | 5.4 | No | Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated users to inject arbitra... | 2026-11-04 |
| CVE-2026-119922 | high | 8.8 | No | Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote au... | 2026-11-04 |
| CVE-2026-91457 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-04 |
| CVE-2026-91458 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-91483 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-75883 | medium | 6.8 | No | A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specia... | 2026-11-04 |
| CVE-2026-14330 | medium | 5.5 | No | Multiple unbounded alloca() calls in the PulseAudio protocol server. | 2026-11-04 |