Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-119281 | medium | 5.9 | No | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5... | 2026-11-04 |
| CVE-2026-119277 | medium | 5.9 | No | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5... | 2026-11-04 |
| CVE-2026-119208 | medium | 5.5 | No | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application ac... | 2026-11-04 |
| CVE-2026-119204 | medium | 5.5 | No | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsing a crafted PDF pag... | 2026-11-04 |
| CVE-2026-119200 | medium | 6.5 | No | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-encoded dot segments b... | 2026-11-04 |
| CVE-2026-119196 | high | 7.5 | No | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit... | 2026-11-04 |
| CVE-2026-119191 | high | 7.5 | No | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementa... | 2026-11-04 |
| CVE-2026-119146 | medium | 5.6 | No | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that allows remote... | 2026-11-04 |
| CVE-2026-119187 | high | 7.5 | No | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementa... | 2026-11-04 |
| CVE-2026-119143 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code to trigger a host p... | 2026-11-04 |
| CVE-2026-119139 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports usi... | 2026-11-04 |
| CVE-2026-119135 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type tha... | 2026-11-04 |
| CVE-2026-119131 | medium | 5.3 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http that lets guests cra... | 2026-11-04 |
| CVE-2026-118947 | medium | 4.3 | No | A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's... | 2026-11-04 |
| CVE-2026-118780 | low | 3.7 | No | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementa... | 2026-11-04 |
| CVE-2026-119127 | high | 8.1 | No | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticated attackers to poiso... | 2026-11-04 |
| CVE-2026-119123 | high | 7.5 | No | ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attack... | 2026-11-04 |
| CVE-2026-119119 | high | 7.5 | No | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_be... | 2026-11-04 |
| CVE-2026-119054 | medium | 5.4 | No | Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users... | 2026-11-04 |
| CVE-2026-117346 | high | 7.5 | No | Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit | 2026-11-04 |