Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-114046 | medium | 6.5 | No | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SC... | 2026-10-28 |
| CVE-2026-114044 | medium | 5.3 | No | FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyon... | 2026-10-28 |
| CVE-2026-114041 | medium | 6.5 | No | FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-c... | 2026-10-28 |
| CVE-2026-113736 | critical | 9.8 | No | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defno... | 2026-10-28 |
| CVE-2026-113731 | low | 3.3 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.... | 2026-10-28 |
| CVE-2026-113705 | medium | 5.3 | No | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error... | 2026-10-28 |
| CVE-2026-112911 | medium | 6.3 | No | filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteL... | 2026-10-28 |
| CVE-2026-112898 | medium | 5.3 | No | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an em... | 2026-10-28 |
| CVE-2026-112893 | high | 7.5 | No | Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an act... | 2026-10-28 |
| CVE-2026-112404 | high | 8.2 | No | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by l... | 2026-10-28 |
| CVE-2026-112399 | high | 7.5 | No | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before... | 2026-10-28 |
| CVE-2026-111411 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketin... | 2026-10-28 |
| CVE-2026-111120 | high | 8.8 | No | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl... | 2026-10-28 |
| CVE-2026-112395 | high | 8.2 | No | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-by... | 2026-10-28 |
| CVE-2026-111750 | not reported | — | No | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HT... | 2026-10-28 |
| CVE-2026-111064 | not reported | — | No | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during... | 2026-10-28 |
| CVE-2026-110185 | medium | 5.9 | No | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to L... | 2026-10-28 |
| CVE-2026-109980 | medium | 4.3 | No | The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3... | 2026-10-28 |
| CVE-2026-107710 | medium | 6.4 | No | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'con... | 2026-10-28 |
| CVE-2026-111057 | critical | 10.0 | No | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in B... | 2026-10-28 |