Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-14540 | critical | 9.8 | No | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig. | 2026-10-08 |
| CVE-2019-14379 | critical | 9.8 | No | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache... | 2026-10-08 |
| CVE-2018-14719 | critical | 9.8 | No | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-... | 2026-10-08 |
| CVE-2018-14718 | critical | 9.8 | No | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-... | 2026-10-08 |
| CVE-2018-11307 | critical | 9.8 | No | An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBat... | 2026-10-08 |
| CVE-2018-1000802 | critical | 9.8 | No | Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('C... | 2026-10-08 |
| CVE-2016-9063 | critical | 9.8 | No | An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. | 2026-10-08 |
| CVE-2017-1000158 | critical | 9.8 | No | CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in... | 2026-10-08 |
| CVE-2016-0718 | critical | 9.8 | No | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input docum... | 2026-10-08 |
| CVE-2013-7285 | critical | 9.8 | No | Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run... | 2026-10-08 |
| CVE-2026-97717 | not reported | — | No | CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malforme... | 2026-10-08 |
| CVE-2026-97716 | not reported | — | No | CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attac... | 2026-10-08 |
| CVE-2026-97715 | not reported | — | No | CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attacker... | 2026-10-08 |
| CVE-2026-97714 | not reported | — | No | CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send... | 2026-10-08 |
| CVE-2026-93858 | not reported | — | No | In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyComma... | 2026-10-08 |
| CVE-2026-107615 | high | 7.8 | No | An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to... | 2026-10-08 |
| CVE-2026-107614 | medium | 6.1 | No | An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenti... | 2026-10-08 |
| CVE-2026-107613 | medium | 5.9 | No | A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an a... | 2026-10-08 |
| CVE-2026-107612 | high | 7.8 | No | Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite... | 2026-10-08 |
| CVE-2026-107611 | high | 7.1 | No | An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromi... | 2026-10-08 |