Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112094 | medium | 5.5 | No | A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file... | 2026-10-19 |
| CVE-2026-112090 | medium | 6.3 | No | A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d... | 2026-10-19 |
| CVE-2026-112086 | medium | 6.3 | No | A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_mode... | 2026-10-19 |
| CVE-2026-112080 | medium | 6.3 | No | A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function... | 2026-10-19 |
| CVE-2026-112076 | medium | 5.6 | No | A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability affects the function DownloadQueue.__writ... | 2026-10-19 |
| CVE-2026-112045 | medium | 5.4 | No | A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/mode... | 2026-10-19 |
| CVE-2026-112041 | low | 3.7 | No | A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function... | 2026-10-19 |
| CVE-2026-112037 | low | 3.7 | No | A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCor... | 2026-10-19 |
| CVE-2026-112033 | medium | 4.3 | No | A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act... | 2026-10-19 |
| CVE-2026-112029 | low | 2.5 | No | A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.cl... | 2026-10-19 |
| CVE-2026-112025 | high | 7.3 | No | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impa... | 2026-10-19 |
| CVE-2026-111990 | high | 7.3 | No | A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the fun... | 2026-10-19 |
| CVE-2026-111408 | high | 8.8 | No | Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue af... | 2026-10-19 |
| CVE-2026-111398 | high | 7.7 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-l... | 2026-10-19 |
| CVE-2026-100798 | high | 8.1 | No | Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153... | 2026-10-19 |
| CVE-2026-100799 | medium | 4.3 | No | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 2026-10-19 |
| CVE-2026-100800 | critical | 9.6 | No | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird... | 2026-10-19 |
| CVE-2026-100802 | medium | 4.3 | No | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 2026-10-19 |
| CVE-2026-100803 | high | 8.1 | No | Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 14... | 2026-10-19 |
| CVE-2026-100804 | critical | 9.6 | No | Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 2026-10-19 |