Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-122016 | medium | 6.3 | No | A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPermissionService.getMenuPermissio... | 2026-11-04 |
| CVE-2026-122015 | medium | 6.3 | No | A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/ge... | 2026-11-04 |
| CVE-2026-121751 | low | 3.1 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39.6 through 0.40.8, `n... | 2026-11-04 |
| CVE-2026-122014 | medium | 6.3 | No | A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. Th... | 2026-11-04 |
| CVE-2026-121750 | low | 3.1 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.5 through 0.40.8, `n... | 2026-11-04 |
| CVE-2026-121749 | low | 3.3 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.5.0 through 0.40.8, the... | 2026-11-04 |
| CVE-2026-121748 | low | 3.6 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.27.0 through 0.40.8, wh... | 2026-11-04 |
| CVE-2026-121747 | medium | 5.5 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.2.0 through 0.40.8, nvm... | 2026-11-04 |
| CVE-2026-121746 | medium | 5.5 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, `n... | 2026-11-04 |
| CVE-2026-121745 | low | 2.5 | No | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, wh... | 2026-11-04 |
| CVE-2026-120830 | high | 7.4 | No | A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response, the length of the quoted original IPv4 packet wa... | 2026-11-04 |
| CVE-2026-11837 | high | 7.3 | No | A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.cho... | 2026-11-04 |
| CVE-2026-11610 | high | 8.8 | No | A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integri... | 2026-11-04 |
| CVE-2026-11807 | critical | 9.6 | No | A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint d... | 2026-11-04 |
| CVE-2026-11774 | high | 7.6 | No | An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uin... | 2026-11-04 |
| CVE-2026-11332 | high | 7.8 | No | A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirement... | 2026-11-04 |
| CVE-2026-116858 | medium | 4.3 | No | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator forminator allows Code In... | 2026-11-04 |
| CVE-2026-119777 | high | 8.8 | No | A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflo... | 2026-11-04 |
| CVE-2026-119528 | high | 7.8 | No | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resourc... | 2026-11-04 |
| CVE-2026-114187 | medium | 5.3 | No | Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control... | 2026-11-04 |