Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118697 | critical | 9.0 | No | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 20... | 2026-11-02 |
| CVE-2026-117549 | medium | 4.2 | No | @fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through 8.4.1, when... | 2026-11-02 |
| CVE-2026-117531 | medium | 5.9 | No | @fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 through 10.1.6, the pl... | 2026-11-02 |
| CVE-2026-117518 | high | 8.2 | No | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including 12.8.0, the plugi... | 2026-11-02 |
| CVE-2026-118384 | medium | 6.1 | No | GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c. | 2026-11-02 |
| CVE-2026-116223 | medium | 6.5 | No | A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manip... | 2026-11-02 |
| CVE-2026-116122 | low | 3.7 | No | A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in En... | 2026-11-02 |
| CVE-2026-116116 | high | 8.2 | No | A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing... | 2026-11-02 |
| CVE-2026-116113 | medium | 6.3 | No | A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller... | 2026-11-02 |
| CVE-2026-116110 | high | 7.3 | No | A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallp... | 2026-11-02 |
| CVE-2026-116107 | medium | 5.4 | No | A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_d... | 2026-11-02 |
| CVE-2026-116104 | medium | 6.3 | No | A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorat... | 2026-11-02 |
| CVE-2026-116101 | medium | 6.3 | No | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetr... | 2026-11-02 |
| CVE-2026-115825 | high | 7.5 | No | HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The requ... | 2026-11-02 |
| CVE-2026-115824 | high | 7.5 | No | Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder... | 2026-11-02 |
| CVE-2026-115823 | critical | 9.1 | No | Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a... | 2026-11-02 |
| CVE-2026-115863 | high | 7.6 | No | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a... | 2026-11-02 |
| CVE-2026-110475 | not reported | — | No | This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platfor... | 2026-11-02 |
| CVE-2026-110474 | not reported | — | No | This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScr... | 2026-11-02 |
| CVE-2026-109553 | high | 7.5 | No | Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When... | 2026-11-02 |