Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92193 | medium | 6.5 | No | Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remot... | 2026-11-04 |
| CVE-2026-92192 | high | 8.8 | No | Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attack... | 2026-11-04 |
| CVE-2026-92191 | high | 8.8 | No | Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attacke... | 2026-11-04 |
| CVE-2026-92190 | critical | 9.8 | No | Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabilit... | 2026-11-04 |
| CVE-2026-92189 | critical | 9.8 | No | Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerabilit... | 2026-11-04 |
| CVE-2026-92188 | critical | 9.8 | No | Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows r... | 2026-11-04 |
| CVE-2026-92187 | high | 8.8 | No | Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allo... | 2026-11-04 |
| CVE-2026-92186 | high | 8.8 | No | Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows... | 2026-11-04 |
| CVE-2026-92185 | high | 7.2 | No | Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows r... | 2026-11-04 |
| CVE-2026-97693 | critical | 9.9 | No | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there i... | 2026-11-04 |
| CVE-2026-76893 | not reported | — | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-63655 | high | 7.5 | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-58128 | medium | 6.2 | No | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious appl... | 2026-11-04 |
| CVE-2026-57567 | high | 8.6 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected... | 2026-11-04 |
| CVE-2026-57566 | critical | 9.3 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.1... | 2026-11-04 |
| CVE-2026-57565 | medium | 6.5 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.1... | 2026-11-04 |
| CVE-2026-57562 | medium | 6.5 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.1... | 2026-11-04 |
| CVE-2026-55368 | high | 8.1 | No | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-l... | 2026-11-04 |
| CVE-2026-55367 | high | 7.5 | No | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could... | 2026-11-04 |
| CVE-2026-54380 | medium | 5.4 | No | VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attackers to upload an S... | 2026-11-04 |