Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-115498 | high | 7.2 | No | The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website (Website contact-field)' parameter in... | 2026-11-04 |
| CVE-2026-115413 | high | 7.8 | No | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run... | 2026-11-04 |
| CVE-2026-115495 | not reported | — | No | Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attack... | 2026-11-04 |
| CVE-2026-115750 | low | 3.7 | No | mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Coo... | 2026-11-04 |
| CVE-2026-115353 | high | 8.6 | No | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by s... | 2026-11-04 |
| CVE-2026-115334 | medium | 6.8 | No | Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to jo... | 2026-11-04 |
| CVE-2026-115330 | high | 8.8 | No | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arbitrary SQL by append... | 2026-11-04 |
| CVE-2026-114598 | high | 7.5 | No | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the applicatio... | 2026-11-04 |
| CVE-2026-114597 | high | 7.5 | No | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the applicatio... | 2026-11-04 |
| CVE-2026-114596 | high | 8.2 | No | In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overf... | 2026-11-04 |
| CVE-2026-114595 | critical | 9.8 | No | In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect... | 2026-11-04 |
| CVE-2026-113881 | not reported | — | No | A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user... | 2026-11-04 |
| CVE-2026-114409 | not reported | — | No | Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and dia... | 2026-11-04 |
| CVE-2026-112710 | not reported | — | No | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts tr... | 2026-11-04 |
| CVE-2026-112709 | not reported | — | No | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic t... | 2026-11-04 |
| CVE-2026-111585 | high | 8.8 | No | An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) p... | 2026-11-04 |
| CVE-2026-111584 | high | 7.3 | No | A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a... | 2026-11-04 |
| CVE-2026-111583 | high | 7.3 | No | Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during... | 2026-11-04 |
| CVE-2026-111582 | high | 7.3 | No | A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local aut... | 2026-11-04 |
| CVE-2026-112331 | high | 7.5 | No | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic... | 2026-11-04 |