Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-59664 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59663 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59662 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59671 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59670 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59669 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-18036 | not reported | — | No | In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are d... | 2026-10-02 |
| CVE-2026-17508 | not reported | — | No | In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the un... | 2026-10-02 |
| CVE-2026-104854 | not reported | — | No | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its... | 2026-10-02 |
| CVE-2026-104853 | not reported | — | No | Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-m... | 2026-10-02 |
| CVE-2026-104422 | high | 7.5 | No | The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks... | 2026-10-02 |
| CVE-2026-104418 | high | 7.2 | No | Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusi... | 2026-10-02 |
| CVE-2026-104414 | high | 8.1 | No | Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into p... | 2026-10-02 |
| CVE-2026-104606 | medium | 6.3 | No | A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the... | 2026-10-02 |
| CVE-2026-104411 | high | 7.3 | No | Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading fi... | 2026-10-02 |
| CVE-2026-104410 | high | 7.5 | No | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers to read password-protected and publish-disa... | 2026-10-02 |
| CVE-2026-103426 | high | 7.2 | No | The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_rt' parameter in all versions up to, and... | 2026-10-02 |
| CVE-2026-100182 | high | 7.2 | No | The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all v... | 2026-10-02 |
| CVE-2026-77387 | medium | 4.0 | No | geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.from_string() can spend excessive CPU time due to inefficient... | 2026-10-02 |
| CVE-2026-69562 | medium | 6.5 | No | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. | 2026-10-02 |