Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116580 | high | 7.3 | No | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJ... | 2026-11-02 |
| CVE-2026-116576 | high | 7.8 | No | systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js inserts a caller-supp... | 2026-11-02 |
| CVE-2026-116555 | low | 2.4 | No | A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/f... | 2026-11-02 |
| CVE-2026-116514 | medium | 4.3 | No | A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Ex... | 2026-11-02 |
| CVE-2026-116506 | critical | 9.9 | No | A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This m... | 2026-11-02 |
| CVE-2026-116502 | medium | 4.4 | No | A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exll... | 2026-11-02 |
| CVE-2026-116478 | medium | 5.3 | No | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of t... | 2026-11-02 |
| CVE-2026-116476 | medium | 5.4 | No | A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatu... | 2026-11-02 |
| CVE-2026-116372 | not reported | — | No | MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The process_feed_respon... | 2026-11-02 |
| CVE-2026-107057 | critical | 9.8 | No | An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. | 2026-11-02 |
| CVE-2026-107079 | medium | 4.3 | No | An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_au... | 2026-11-02 |
| CVE-2026-106765 | high | 7.5 | No | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. | 2026-11-02 |
| CVE-2024-58399 | medium | 6.1 | No | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the m... | 2026-11-02 |
| CVE-2022-2625 | high | 8.0 | No | A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability... | 2026-11-02 |
| CVE-2022-27779 | medium | 5.3 | No | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to re... | 2026-11-02 |
| CVE-2022-26931 | high | 7.5 | No | Windows Kerberos Elevation of Privilege Vulnerability | 2026-11-02 |
| CVE-2022-1725 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. | 2026-11-02 |
| CVE-2022-1974 | medium | 4.1 | No | A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. Th... | 2026-11-02 |
| CVE-2022-1354 | medium | 5.5 | No | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a c... | 2026-11-02 |
| CVE-2022-0171 | medium | 5.5 | No | A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to c... | 2026-11-02 |