Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102505 | medium | 6.3 | No | Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp. For a paletted im... | 2026-10-08 |
| CVE-2026-97678 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation... | 2026-10-08 |
| CVE-2026-97674 | high | 8.1 | No | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutraliz... | 2026-10-08 |
| CVE-2026-97655 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code sec... | 2026-10-08 |
| CVE-2026-103885 | high | 7.5 | No | Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 1... | 2026-10-08 |
| CVE-2026-12423 | high | 7.5 | No | A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a sem... | 2026-10-08 |
| CVE-2026-12541 | high | 8.2 | No | A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The applicatio... | 2026-10-08 |
| CVE-2026-12540 | high | 8.2 | No | A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is... | 2026-10-08 |
| CVE-2026-12544 | high | 7.7 | No | A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code patte... | 2026-10-08 |
| CVE-2026-103001 | medium | 6.5 | No | PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT._merge_options() method can modify a... | 2026-10-08 |
| CVE-2026-17646 | medium | 6.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due... | 2026-10-08 |
| CVE-2025-11631 | critical | 9.1 | No | A vulnerability was determined in RainyGao DocSys up to 2.02.36. Affected by this vulnerability is an unknown functionality of the file /Doc... | 2026-10-08 |
| CVE-2025-11630 | critical | 9.8 | No | A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the comp... | 2026-10-08 |
| CVE-2025-11629 | critical | 9.8 | No | A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. S... | 2026-10-08 |
| CVE-2025-31998 | critical | 9.8 | No | HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can explo... | 2026-10-08 |
| CVE-2025-31993 | critical | 9.8 | No | HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper inp... | 2026-10-08 |
| CVE-2025-11615 | critical | 9.8 | No | A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_... | 2026-10-08 |
| CVE-2025-11614 | critical | 9.8 | No | A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of t... | 2026-10-08 |
| CVE-2025-11608 | critical | 9.8 | No | A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php... | 2026-10-08 |
| CVE-2025-11604 | critical | 9.8 | No | A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all... | 2026-10-08 |