Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63417 | not reported | — | No | Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.... | 2026-11-03 |
| CVE-2026-65139 | medium | 6.3 | No | NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution. | 2026-11-03 |
| CVE-2026-65138 | medium | 6.3 | No | NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentica... | 2026-11-03 |
| CVE-2026-65109 | medium | 4.7 | No | NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of... | 2026-11-03 |
| CVE-2026-65108 | medium | 6.3 | No | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root... | 2026-11-03 |
| CVE-2026-65107 | medium | 6.3 | No | NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a... | 2026-11-03 |
| CVE-2026-55288 | high | 8.4 | No | In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to loc... | 2026-11-03 |
| CVE-2026-56097 | medium | 6.5 | No | A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application... | 2026-11-03 |
| CVE-2026-121602 | medium | 6.5 | No | Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by... | 2026-11-03 |
| CVE-2026-121559 | high | 7.2 | No | GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows authenticated users to obtain... | 2026-11-03 |
| CVE-2026-121555 | high | 7.5 | No | Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /a... | 2026-11-03 |
| CVE-2026-121551 | medium | 5.4 | No | PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to inject script by... | 2026-11-03 |
| CVE-2026-121547 | low | 2.2 | No | Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by c... | 2026-11-03 |
| CVE-2026-121543 | high | 8.8 | No | smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call adm... | 2026-11-03 |
| CVE-2026-121505 | low | 3.7 | No | An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_core) in NTPsec before 1.2.4 allows a malicious NTS-... | 2026-11-03 |
| CVE-2026-121452 | medium | 6.5 | No | bbs-go through 4.4.6 contains an improper certificate validation vulnerability that allows network-positioned attackers to intercept SMTP tr... | 2026-11-03 |
| CVE-2026-121448 | high | 8.3 | No | Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files out... | 2026-11-03 |
| CVE-2026-121444 | high | 7.5 | No | svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop() and countUse(... | 2026-11-03 |
| CVE-2026-121440 | low | 3.7 | No | Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the WasiHttpHooks::is_forbidden_header hook... | 2026-11-03 |
| CVE-2026-121436 | high | 7.2 | No | Froxlor from 2.3.8 before 2.3.15 contains an information disclosure vulnerability that allows administrators with customers_see_all to view... | 2026-11-03 |