Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116691 | medium | 6.5 | No | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.19.0 until 3.17.0, m... | 2026-11-03 |
| CVE-2026-117526 | medium | 5.3 | No | A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remote... | 2026-11-03 |
| CVE-2026-115904 | critical | 9.6 | No | Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-control... | 2026-11-03 |
| CVE-2026-116687 | low | 3.1 | No | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup c... | 2026-11-03 |
| CVE-2026-116683 | not reported | — | No | CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored as a non-sensitive v... | 2026-11-03 |
| CVE-2025-49521 | high | 8.8 | No | A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as... | 2026-11-03 |
| CVE-2025-49520 | high | 8.8 | No | A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote com... | 2026-11-03 |
| CVE-2026-106971 | high | 7.5 | No | An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a deni... | 2026-11-03 |
| CVE-2015-20129 | high | 8.8 | No | CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions because CS... | 2026-11-03 |
| CVE-2013-20009 | medium | 4.8 | No | Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts v... | 2026-11-03 |
| CVE-2026-101708 | high | 7.5 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-101709 | medium | 5.4 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-101710 | medium | 6.8 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-101711 | medium | 6.6 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3... | 2026-11-03 |
| CVE-2026-101712 | high | 7.5 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-83359 | medium | 6.5 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-83360 | medium | 6.5 | No | Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that... | 2026-11-03 |
| CVE-2026-83391 | medium | 5.4 | No | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affec... | 2026-11-03 |
| CVE-2026-87295 | medium | 6.5 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-87363 | high | 7.5 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-11-03 |