Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116729 | low | 3.3 | No | libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a() caused by an unbo... | 2026-11-02 |
| CVE-2026-116725 | medium | 5.5 | No | gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROM bank indexes beyon... | 2026-11-02 |
| CVE-2026-116639 | low | 3.5 | No | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected i... | 2026-11-02 |
| CVE-2026-116608 | medium | 5.4 | No | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_mod... | 2026-11-02 |
| CVE-2026-116603 | medium | 4.7 | No | A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Exe... | 2026-11-02 |
| CVE-2026-116588 | not reported | — | No | Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expre... | 2026-11-02 |
| CVE-2026-116584 | high | 7.5 | No | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.4.1 until 1.6.... | 2026-11-02 |
| CVE-2026-116580 | high | 7.3 | No | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJ... | 2026-11-02 |
| CVE-2026-116576 | high | 7.8 | No | systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js inserts a caller-supp... | 2026-11-02 |
| CVE-2026-116555 | low | 2.4 | No | A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/f... | 2026-11-02 |
| CVE-2026-116514 | medium | 4.3 | No | A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Ex... | 2026-11-02 |
| CVE-2026-116506 | critical | 9.9 | No | A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This m... | 2026-11-02 |
| CVE-2026-116502 | medium | 4.4 | No | A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exll... | 2026-11-02 |
| CVE-2026-116478 | medium | 5.3 | No | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of t... | 2026-11-02 |
| CVE-2026-116476 | medium | 5.4 | No | A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatu... | 2026-11-02 |
| CVE-2026-116372 | not reported | — | No | MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The process_feed_respon... | 2026-11-02 |
| CVE-2026-107057 | critical | 9.8 | No | An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. | 2026-11-02 |
| CVE-2026-107079 | medium | 4.3 | No | An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_au... | 2026-11-02 |
| CVE-2026-106765 | high | 7.5 | No | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. | 2026-11-02 |
| CVE-2024-58399 | medium | 6.1 | No | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the m... | 2026-11-02 |