Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97705 | high | 7.5 | No | Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transporters/tcp/parser.js... | 2026-11-04 |
| CVE-2026-76806 | medium | 6.3 | No | Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-controlled project id values f... | 2026-11-04 |
| CVE-2026-122220 | high | 7.4 | No | WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-f... | 2026-11-04 |
| CVE-2026-122192 | high | 7.5 | No | Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to re... | 2026-11-04 |
| CVE-2026-122118 | high | 7.4 | No | In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient streng... | 2026-11-04 |
| CVE-2026-12109 | high | 7.2 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrat... | 2026-11-04 |
| CVE-2026-121933 | critical | 10.0 | No | A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi of the component Se... | 2026-11-04 |
| CVE-2026-122116 | medium | 4.3 | No | Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configu... | 2026-11-04 |
| CVE-2026-121925 | medium | 6.6 | No | A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, result in memory corr... | 2026-11-04 |
| CVE-2026-121818 | high | 7.8 | No | Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly... | 2026-11-04 |
| CVE-2026-121817 | high | 7.5 | No | Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attacker... | 2026-11-04 |
| CVE-2026-121816 | high | 8.8 | No | Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote attackers can connect... | 2026-11-04 |
| CVE-2026-121250 | critical | 9.6 | No | Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially... | 2026-11-04 |
| CVE-2026-121239 | medium | 6.5 | No | Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML pa... | 2026-11-04 |
| CVE-2026-121176 | medium | 6.5 | No | Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a cr... | 2026-11-04 |
| CVE-2026-121161 | medium | 6.5 | No | Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a craf... | 2026-11-04 |
| CVE-2026-121132 | medium | 6.5 | No | Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page... | 2026-11-04 |
| CVE-2026-121105 | medium | 6.5 | No | Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML... | 2026-11-04 |
| CVE-2026-121059 | medium | 6.5 | No | Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page... | 2026-11-04 |
| CVE-2026-120421 | medium | 6.1 | No | In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabl... | 2026-11-04 |