| unknown |
CVE-2026-92287 — Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0… |
vulnerability |
nvd |
CVE-2026-92287 |
|
2026-10-20 |
| unknown |
CVE-2026-43848 — A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker… |
vulnerability |
nvd |
CVE-2026-43848 |
|
2026-10-20 |
| unknown |
CVE-2026-43847 — A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator… |
vulnerability |
nvd |
CVE-2026-43847 |
|
2026-10-20 |
| unknown |
CVE-2026-43846 — A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated… |
vulnerability |
nvd |
CVE-2026-43846 |
|
2026-10-20 |
| unknown |
CVE-2026-43845 — A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication… |
vulnerability |
nvd |
CVE-2026-43845 |
|
2026-10-20 |
| unknown |
CVE-2026-43844 — A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mec… |
vulnerability |
nvd |
CVE-2026-43844 |
|
2026-10-20 |
| unknown |
CVE-2026-43843 — An integer overflow vulnerability in the license manager service could allow an unauthenticated atta… |
vulnerability |
nvd |
CVE-2026-43843 |
|
2026-10-20 |
| unknown |
CVE-2026-43840 — A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticat… |
vulnerability |
nvd |
CVE-2026-43840, CVE-2026-43841, CVE-2026-43842 |
|
2026-10-20 |
| unknown |
CVE-2026-43839 — A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthe… |
vulnerability |
nvd |
CVE-2026-43839 |
|
2026-10-20 |
| unknown |
CVE-2026-43838 — A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to ac… |
vulnerability |
nvd |
CVE-2026-43838 |
|
2026-10-20 |
| unknown |
CVE-2026-43837 — A buffer overflow vulnerability in the password verification functionality could allow an attacker w… |
vulnerability |
nvd |
CVE-2026-43837 |
|
2026-10-20 |
| unknown |
CVE-2026-43836 — A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum… |
vulnerability |
nvd |
CVE-2026-43836 |
|
2026-10-20 |
| medium |
CVE-2026-11960 — Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns dif… |
vulnerability |
nvd |
CVE-2026-11960 |
phishing |
2026-10-20 |
| unknown |
CVE-2026-11959 — Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate v… |
vulnerability |
nvd |
CVE-2026-11959 |
|
2026-10-20 |
| high |
CVE-2026-113469 — A failure has been identified in the SNS during dynamic data files signature check. A logic error in… |
vulnerability |
nvd |
CVE-2026-113469 |
|
2026-10-20 |
| medium |
CVE-2026-113465 — It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administ… |
vulnerability |
nvd |
CVE-2026-113465 |
|
2026-10-20 |
| unknown |
CVE-2026-101201 — A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behav… |
vulnerability |
nvd |
CVE-2026-101201 |
|
2026-10-20 |
| unknown |
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-43835 — A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to uploa… |
vulnerability |
nvd |
CVE-2026-43835 |
|
2026-10-20 |
| unknown |
CVE-2026-43834 — A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authen… |
vulnerability |
nvd |
CVE-2026-43834 |
|
2026-10-20 |
| high |
CVE-2026-113405 — BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attacke… |
vulnerability |
nvd |
CVE-2026-113405, CVE-2026-113406, CVE-2026-113407 |
|
2026-10-20 |
| high |
CVE-2026-112177 — A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2… |
vulnerability |
nvd |
CVE-2026-112177 |
|
2026-10-20 |
| high |
CVE-2026-111090 — A logic error exists in the signature verification routine resulting in acceptance of unauthenticate… |
vulnerability |
nvd |
CVE-2026-111090 |
|
2026-10-20 |
| medium |
CVE-2026-93878 — The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_l… |
vulnerability |
nvd |
CVE-2026-93878 |
|
2026-10-20 |
| high |
CVE-2026-113404 — WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attack… |
vulnerability |
nvd |
CVE-2026-113404 |
|
2026-10-20 |
| medium |
CVE-2026-113403 — ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticat… |
vulnerability |
nvd |
CVE-2026-113403 |
|
2026-10-20 |
| medium |
CVE-2026-113402 — ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenti… |
vulnerability |
nvd |
CVE-2026-113402 |
|
2026-10-20 |
| unknown |
CVE-2026-112148 — A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cr… |
vulnerability |
nvd |
CVE-2026-112148 |
|
2026-10-20 |
| medium |
CVE-2026-110180 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2… |
vulnerability |
nvd |
CVE-2026-110180 |
|
2026-10-20 |
| medium |
CVE-2026-110095 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4… |
vulnerability |
nvd |
CVE-2026-110095, CVE-2026-110306, CVE-2026-110725 |
|
2026-10-20 |
| unknown |
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan |
news |
general-news |
|
|
2026-10-20 |
| unknown |
How to Get Your Freezers (and Other Stuff) Off the Internet! |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| medium |
CVE-2026-96903 — The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on s… |
vulnerability |
nvd |
CVE-2026-96903 |
|
2026-10-20 |
| medium |
CVE-2026-96902 — The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it… |
vulnerability |
nvd |
CVE-2026-96902 |
|
2026-10-20 |
| high |
CVE-2026-93300 — The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email'… |
vulnerability |
nvd |
CVE-2026-93300 |
|
2026-10-20 |
| unknown |
CVE-2026-100737 — Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Elec… |
vulnerability |
nvd |
CVE-2026-100737, CVE-2026-97627 |
|
2026-10-20 |
| high |
CVE-2026-113386 — Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A rem… |
vulnerability |
nvd |
CVE-2026-113386 |
|
2026-10-20 |
| unknown |
CVE-2026-113380 — In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interf… |
vulnerability |
nvd |
CVE-2026-113380 |
|
2026-10-20 |
| unknown |
CVE-2026-109831 — UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an… |
vulnerability |
nvd |
CVE-2026-109831 |
|
2026-10-20 |
| unknown |
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-86467 — Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authenticat… |
vulnerability |
nvd |
CVE-2026-86467 |
|
2026-10-20 |
| medium |
CVE-2026-12489 — An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware… |
vulnerability |
nvd |
CVE-2026-12489 |
|
2026-10-20 |
| unknown |
CVE-2026-75753 — Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby… |
vulnerability |
nvd |
CVE-2026-75753 |
|
2026-10-20 |
| unknown |
CVE-2026-17518 — Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenti… |
vulnerability |
nvd |
CVE-2026-17518 |
|
2026-10-20 |
| high |
CVE-2026-105299 — Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream reques… |
vulnerability |
nvd |
CVE-2026-105299 |
|
2026-10-20 |
| unknown |
CVE-2026-102438 — An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execut… |
vulnerability |
nvd |
CVE-2026-102438 |
|
2026-10-20 |
| medium |
CVE-2026-86981 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac… |
vulnerability |
nvd |
CVE-2026-86981 |
|
2026-10-20 |
| medium |
CVE-2026-86979 — A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An… |
vulnerability |
nvd |
CVE-2026-86979 |
|
2026-10-20 |
| unknown |
CVE-2026-86977 — An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS… |
vulnerability |
nvd |
CVE-2026-86977 |
|
2026-10-20 |
| medium |
CVE-2026-86975 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and… |
vulnerability |
nvd |
CVE-2026-86975 |
|
2026-10-20 |