Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-16313 | high | 7.6 | No | A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitiz... | 2026-11-04 |
| CVE-2026-13732 | high | 7.0 | No | A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal... | 2026-11-04 |
| CVE-2026-13601 | medium | 6.5 | No | A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak... | 2026-11-04 |
| CVE-2026-13097 | high | 8.7 | No | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds dir... | 2026-11-04 |
| CVE-2026-14474 | high | 8.8 | No | A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire... | 2026-11-04 |
| CVE-2026-12564 | critical | 9.6 | No | A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashiv... | 2026-11-04 |
| CVE-2026-12912 | high | 7.3 | No | A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF im... | 2026-11-04 |
| CVE-2026-122266 | high | 8.7 | No | Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) m... | 2026-11-04 |
| CVE-2026-122020 | medium | 4.3 | No | A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the fil... | 2026-11-04 |
| CVE-2026-122019 | high | 7.3 | No | A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-acco... | 2026-11-04 |
| CVE-2026-12505 | high | 7.8 | No | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user in... | 2026-11-04 |
| CVE-2026-12080 | high | 7.3 | No | A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys c... | 2026-11-04 |
| CVE-2026-122016 | medium | 6.3 | No | A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPermissionService.getMenuPermissio... | 2026-11-04 |
| CVE-2026-122015 | medium | 6.3 | No | A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/ge... | 2026-11-04 |
| CVE-2026-121751 | low | 3.1 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39.6 through 0.40.8, `n... | 2026-11-04 |
| CVE-2026-122014 | medium | 6.3 | No | A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. Th... | 2026-11-04 |
| CVE-2026-121750 | low | 3.1 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.5 through 0.40.8, `n... | 2026-11-04 |
| CVE-2026-121749 | low | 3.3 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.5.0 through 0.40.8, the... | 2026-11-04 |
| CVE-2026-121748 | low | 3.6 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.27.0 through 0.40.8, wh... | 2026-11-04 |
| CVE-2026-121747 | medium | 5.5 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.2.0 through 0.40.8, nvm... | 2026-11-04 |