Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-120437 | medium | 6.1 | No | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the tgatoppm convert... | 2026-11-02 |
| CVE-2026-120436 | high | 7.8 | No | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer ov... | 2026-11-02 |
| CVE-2026-120433 | high | 7.8 | No | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly()... | 2026-11-02 |
| CVE-2026-120432 | high | 7.8 | No | Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt h... | 2026-11-02 |
| CVE-2026-118052 | not reported | — | No | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Man... | 2026-11-02 |
| CVE-2026-100140 | not reported | — | No | An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt. | 2026-11-02 |
| CVE-2026-120252 | medium | 5.5 | No | imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huffman Table pars... | 2026-11-02 |
| CVE-2026-119341 | none | 0.0 | No | Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a... | 2026-11-02 |
| CVE-2026-119339 | medium | 5.5 | No | Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and cal... | 2026-11-02 |
| CVE-2026-78403 | critical | 9.8 | No | Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Senti... | 2026-11-02 |
| CVE-2026-78402 | high | 7.8 | No | Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Senti... | 2026-11-02 |
| CVE-2026-61620 | critical | 9.8 | No | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into t... | 2026-11-02 |
| CVE-2026-119336 | high | 7.8 | No | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the... | 2026-11-02 |
| CVE-2026-119334 | low | 2.2 | No | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, gravity.sh... | 2026-11-02 |
| CVE-2026-119333 | high | 7.8 | No | draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell and attrib by bare e... | 2026-11-02 |
| CVE-2026-91299 | critical | 10.0 | No | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported... | 2026-11-02 |
| CVE-2017-20266 | high | 8.2 | No | Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries... | 2026-11-02 |
| CVE-2025-4416 | high | 7.5 | No | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects... | 2026-11-02 |
| CVE-2026-91294 | medium | 4.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions t... | 2026-11-02 |
| CVE-2026-91295 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-11-02 |