Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100790 | high | 8.8 | No | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15... | 2026-10-19 |
| CVE-2026-46471 | medium | 5.5 | No | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid funct... | 2026-10-19 |
| CVE-2026-112001 | high | 7.2 | No | ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the toke... | 2026-10-19 |
| CVE-2026-111942 | medium | 4.3 | No | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. Thi... | 2026-10-19 |
| CVE-2026-111874 | low | 3.7 | No | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component C... | 2026-10-19 |
| CVE-2026-111870 | medium | 5.3 | No | A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected... | 2026-10-19 |
| CVE-2026-110897 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for B... | 2026-10-19 |
| CVE-2026-110886 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injectio... | 2026-10-19 |
| CVE-2026-110382 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments... | 2026-10-19 |
| CVE-2026-109894 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL... | 2026-10-19 |
| CVE-2026-108485 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflec... | 2026-10-19 |
| CVE-2026-109131 | medium | 5.4 | No | The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansible-ui, frontend/hub... | 2026-10-19 |
| CVE-2025-62717 | critical | 9.1 | No | Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a cl... | 2026-10-19 |
| CVE-2025-11625 | critical | 9.8 | No | Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of cl... | 2026-10-19 |
| CVE-2025-11624 | critical | 9.8 | No | Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than the system han... | 2026-10-19 |
| CVE-2025-11529 | critical | 9.8 | No | A security flaw has been discovered in ChurchCRM up to 5.18.0. This impacts the function AuthMiddleware of the file src/ChurchCRM/Slim/Middl... | 2026-10-19 |
| CVE-2025-11346 | critical | 9.8 | No | A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler... | 2026-10-19 |
| CVE-2025-11345 | critical | 9.8 | No | A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This m... | 2026-10-19 |
| CVE-2025-11344 | critical | 9.8 | No | A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Cert... | 2026-10-19 |
| CVE-2025-59944 | critical | 9.8 | No | Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protect... | 2026-10-19 |