Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113744 | critical | 10.0 | No | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /g... | 2026-10-28 |
| CVE-2026-113721 | medium | 4.5 | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existi... | 2026-10-28 |
| CVE-2026-112353 | high | 8.2 | No | GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that al... | 2026-10-28 |
| CVE-2026-111758 | high | 7.5 | No | markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose labe... | 2026-10-28 |
| CVE-2026-111255 | high | 7.5 | No | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all... | 2026-10-28 |
| CVE-2026-109999 | high | 7.2 | No | The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot plugin f... | 2026-10-28 |
| CVE-2026-109972 | medium | 6.4 | No | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vu... | 2026-10-28 |
| CVE-2026-109381 | high | 7.2 | No | The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 This is due to the me... | 2026-10-28 |
| CVE-2026-109236 | medium | 4.8 | No | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verifica... | 2026-10-28 |
| CVE-2026-107625 | medium | 6.4 | No | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is v... | 2026-10-28 |
| CVE-2026-104354 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-10-28 |
| CVE-2026-103996 | medium | 6.4 | No | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting... | 2026-10-28 |
| CVE-2024-52616 | medium | 5.3 | No | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially... | 2026-10-28 |
| CVE-2024-52615 | medium | 5.3 | No | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where maliciou... | 2026-10-28 |
| CVE-2023-38473 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. | 2026-10-28 |
| CVE-2023-38472 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. | 2026-10-28 |
| CVE-2023-38471 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. | 2026-10-28 |
| CVE-2023-38470 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. | 2026-10-28 |
| CVE-2023-38469 | medium | 5.5 | No | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. | 2026-10-28 |
| CVE-2014-125136 | medium | 5.9 | No | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerabil... | 2026-10-28 |