Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-59179 | high | 8.3 | No | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated flow route parameter... | 2026-11-04 |
| CVE-2026-59164 | high | 7.1 | No | NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` authenticates the token-management UI but fa... | 2026-11-04 |
| CVE-2026-52729 | high | 7.1 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-11-04 |
| CVE-2026-50541 | medium | 6.5 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-11-04 |
| CVE-2026-92797 | high | 8.8 | No | The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a... | 2026-11-04 |
| CVE-2026-85655 | medium | 4.3 | No | The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due... | 2026-11-04 |
| CVE-2026-115503 | medium | 5.5 | No | Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that... | 2026-11-04 |
| CVE-2026-115398 | medium | 5.5 | No | Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSys... | 2026-11-04 |
| CVE-2026-115397 | medium | 5.5 | No | Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts e... | 2026-11-04 |
| CVE-2026-115394 | medium | 5.5 | No | Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap mem... | 2026-11-04 |
| CVE-2026-16255 | high | 7.1 | No | GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that,... | 2026-11-04 |
| CVE-2026-15723 | high | 8.2 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th... | 2026-11-04 |
| CVE-2026-14288 | low | 3.1 | No | GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that... | 2026-11-04 |
| CVE-2026-13319 | medium | 6.5 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 t... | 2026-11-04 |
| CVE-2026-12664 | medium | 6.8 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th... | 2026-11-04 |
| CVE-2026-112378 | medium | 4.3 | No | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that... | 2026-11-04 |
| CVE-2026-112326 | low | 3.1 | No | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that,... | 2026-11-04 |
| CVE-2026-112212 | high | 7.5 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th... | 2026-11-04 |
| CVE-2026-110264 | critical | 10.0 | No | An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2... | 2026-11-04 |
| CVE-2026-105777 | medium | 6.5 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1... | 2026-11-04 |