Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-114425 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An u... | 2026-11-04 |
| CVE-2026-114424 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacemen... | 2026-11-04 |
| CVE-2026-114421 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is... | 2026-11-04 |
| CVE-2026-114420 | not reported | — | No | SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GIN... | 2026-11-04 |
| CVE-2026-108946 | not reported | — | No | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The ActiveMQ broker resolves connection, session and co... | 2026-11-04 |
| CVE-2026-108500 | not reported | — | No | Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an authenticated attacker to creat... | 2026-11-04 |
| CVE-2026-103582 | not reported | — | No | Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package Apache.NMS.ActiveMQ)... | 2026-11-04 |
| CVE-2026-111822 | not reported | — | No | Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configur... | 2026-11-04 |
| CVE-2026-111821 | not reported | — | No | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientI... | 2026-11-04 |
| CVE-2026-119084 | high | 8.1 | No | Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an ac... | 2026-11-04 |
| CVE-2026-121652 | medium | 5.4 | No | Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated users to inject arbitra... | 2026-11-04 |
| CVE-2026-119922 | high | 8.8 | No | Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote au... | 2026-11-04 |
| CVE-2026-91457 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-04 |
| CVE-2026-91458 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-91483 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-113941 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113940 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113936 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-112698 | medium | 5.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS... | 2026-11-04 |
| CVE-2026-112653 | medium | 4.3 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-04 |