Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104070 | critical | 9.8 | No | The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbi... | 2026-10-09 |
| CVE-2026-105796 | high | 8.8 | No | Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete... | 2026-10-09 |
| CVE-2026-105791 | high | 7.5 | No | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the... | 2026-10-09 |
| CVE-2026-105775 | medium | 4.3 | No | A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/mo... | 2026-10-09 |
| CVE-2023-51714 | critical | 9.8 | No | An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x bef... | 2026-10-08 |
| CVE-2023-26119 | critical | 9.8 | No | Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, wh... | 2026-10-08 |
| CVE-2022-32511 | critical | 9.8 | No | jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable. | 2026-10-08 |
| CVE-2021-29921 | critical | 9.8 | No | In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situat... | 2026-10-08 |
| CVE-2021-23450 | critical | 9.8 | No | All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. | 2026-10-08 |
| CVE-2021-23383 | critical | 9.8 | No | The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates comi... | 2026-10-08 |
| CVE-2021-23369 | critical | 9.8 | No | The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templa... | 2026-10-08 |
| CVE-2020-7788 | critical | 9.8 | No | This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they... | 2026-10-08 |
| CVE-2020-6072 | critical | 9.8 | No | An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compresse... | 2026-10-08 |
| CVE-2019-20445 | critical | 9.1 | No | HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Tr... | 2026-10-08 |
| CVE-2019-20444 | critical | 9.1 | No | HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with... | 2026-10-08 |
| CVE-2019-14893 | critical | 9.8 | No | A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserializat... | 2026-10-08 |
| CVE-2019-13962 | critical | 9.8 | No | lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it do... | 2026-10-08 |
| CVE-2018-1115 | critical | 9.1 | No | postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow... | 2026-10-08 |
| CVE-2018-1270 | critical | 9.8 | No | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose... | 2026-10-08 |
| CVE-2017-7525 | critical | 9.8 | No | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthentica... | 2026-10-08 |