Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116062 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the fi... | 2026-10-29 |
| CVE-2026-116058 | medium | 6.3 | No | A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEngine.eval of the file... | 2026-10-29 |
| CVE-2026-116055 | medium | 6.3 | No | A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/d... | 2026-10-29 |
| CVE-2026-115605 | medium | 4.3 | No | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security L... | 2026-10-29 |
| CVE-2026-114181 | medium | 5.3 | No | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Inco... | 2026-10-29 |
| CVE-2026-110881 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash all... | 2026-10-29 |
| CVE-2026-116014 | high | 8.1 | No | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for... | 2026-10-29 |
| CVE-2026-115638 | medium | 4.3 | No | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a... | 2026-10-29 |
| CVE-2026-110686 | medium | 6.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A deco... | 2026-10-29 |
| CVE-2026-110685 | critical | 9.1 | No | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag. With a... | 2026-10-29 |
| CVE-2026-110684 | high | 8.1 | No | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in enco... | 2026-10-29 |
| CVE-2026-110682 | high | 7.5 | No | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. al... | 2026-10-29 |
| CVE-2026-110678 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The pars... | 2026-10-29 |
| CVE-2026-110677 | high | 7.5 | No | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_... | 2026-10-29 |
| CVE-2026-110676 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bign... | 2026-10-29 |
| CVE-2026-110675 | high | 8.1 | No | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With ut... | 2026-10-29 |
| CVE-2026-110674 | medium | 6.5 | No | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayr... | 2026-10-29 |
| CVE-2026-110673 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_t... | 2026-10-29 |
| CVE-2026-110672 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_h... | 2026-10-29 |
| CVE-2026-107618 | high | 8.1 | No | `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued b... | 2026-10-29 |