Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83038 | critical | 9.9 | No | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that ar... | 2026-10-15 |
| CVE-2026-18111 | medium | 6.1 | No | Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks a... | 2026-10-15 |
| CVE-2026-30754 | high | 8.8 | No | A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264... | 2026-10-15 |
| CVE-2026-97853 | not reported | — | No | Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full resul... | 2026-10-15 |
| CVE-2026-95702 | not reported | — | No | Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard cont... | 2026-10-15 |
| CVE-2026-93861 | not reported | — | No | In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workf... | 2026-10-15 |
| CVE-2026-92159 | medium | 6.5 | No | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0,... | 2026-10-15 |
| CVE-2026-92154 | high | 8.1 | No | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0,... | 2026-10-15 |
| CVE-2026-92151 | high | 7.5 | No | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0,... | 2026-10-15 |
| CVE-2026-91883 | medium | 4.3 | No | Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in... | 2026-10-15 |
| CVE-2026-85975 | high | 7.5 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections... | 2026-10-15 |
| CVE-2026-85966 | high | 7.7 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain securit... | 2026-10-15 |
| CVE-2026-85965 | high | 8.0 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine... | 2026-10-15 |
| CVE-2026-85964 | high | 7.7 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply un... | 2026-10-15 |
| CVE-2026-85963 | high | 7.5 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weak... | 2026-10-15 |
| CVE-2026-85962 | high | 7.5 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SA... | 2026-10-15 |
| CVE-2026-85961 | high | 7.5 | No | On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive au... | 2026-10-15 |
| CVE-2026-85959 | high | 7.5 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication e... | 2026-10-15 |
| CVE-2026-79843 | medium | 6.5 | No | A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclos... | 2026-10-15 |
| CVE-2026-79841 | medium | 5.8 | No | A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption... | 2026-10-15 |