| medium |
CVE-2026-109441 — LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' s… |
vulnerability |
nvd |
CVE-2026-109441 |
|
2026-10-20 |
| high |
CVE-2026-109440 — LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote… |
vulnerability |
nvd |
CVE-2026-109440 |
|
2026-10-20 |
| critical |
CVE-2026-109395 — Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc… |
vulnerability |
nvd |
CVE-2026-109395 |
|
2026-10-20 |
| unknown |
CVE-2026-105298 — Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :… |
vulnerability |
nvd |
CVE-2026-105298 |
|
2026-10-20 |
| high |
CVE-2026-105297 — Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the… |
vulnerability |
nvd |
CVE-2026-105297 |
|
2026-10-20 |
| medium |
CVE-2026-8355 — IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSR… |
vulnerability |
nvd |
CVE-2026-8355 |
|
2026-10-20 |
| medium |
CVE-2026-112373 — A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function… |
vulnerability |
nvd |
CVE-2026-112373 |
|
2026-10-20 |
| high |
CVE-2026-109126 — IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a… |
vulnerability |
nvd |
CVE-2026-109126 |
|
2026-10-20 |
| high |
CVE-2026-107400 — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to… |
vulnerability |
nvd |
CVE-2026-107400 |
|
2026-10-20 |
| high |
CVE-2026-107366 — IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership ver… |
vulnerability |
nvd |
CVE-2026-107366 |
|
2026-10-20 |
| high |
CVE-2026-105453 — IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow… |
vulnerability |
nvd |
CVE-2026-105453 |
|
2026-10-20 |
| high |
CVE-2026-110936 — Siemens Software Center Uncontrolled Search Path Element Vulnerability |
vulnerability |
cisa-kev, nvd, otx |
CVE-2026-110936 | 96.62.218.59, 2.27.248.127 | f4d7c5321bb0d1bd… |
software supply chain, cve-2026-110936, clickfix, industrial software, supply-chain |
2026-10-20 |
| high |
CVE-2026-96654 — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability |
vulnerability |
cisa-kev |
CVE-2026-96654 |
|
2026-10-20 |
| high |
CVE-2026-96655 — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability |
vulnerability |
cisa-kev, otx |
CVE-2026-96655, CVE-2026-96652, CVE-2026-96654, CVE-2026-96656 | 217.60.194.116 | e546b10aee5edc75…, e1b3e738928012a0… |
cve-2026-96656, cve-2026-96654, proxy, exploitation, myawesomeproxy, xmrig, cve-2026-96652, cve-2026-96655, remote code execution, honeypot, cryptominer, plex, residential ip, rce |
2026-10-20 |
| high |
CVE-2026-96656 — Plex Media Server External Control of File Name or Path Vulnerability |
vulnerability |
cisa-kev |
CVE-2026-96656 |
|
2026-10-20 |
| high |
CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
vulnerability |
cisa-kev, nvd |
CVE-2026-106931 |
|
2026-10-20 |
| medium |
CVE-2026-77684 — The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not… |
vulnerability |
nvd |
CVE-2026-77684 |
|
2026-10-19 |
| medium |
CVE-2026-19595 — The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c v… |
vulnerability |
nvd |
CVE-2026-19595 |
|
2026-10-19 |
| medium |
CVE-2026-19178 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to g… |
vulnerability |
nvd |
CVE-2026-19178 |
|
2026-10-19 |
| unknown |
CVE-2026-112991 — The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF)… |
vulnerability |
nvd |
CVE-2026-112991 |
|
2026-10-19 |
| medium |
CVE-2026-112372 — A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile o… |
vulnerability |
nvd |
CVE-2026-112372 |
|
2026-10-19 |
| critical |
CVE-2026-112371 — A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the… |
vulnerability |
nvd |
CVE-2026-112371 |
|
2026-10-19 |
| critical |
CVE-2026-112370 — A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t… |
vulnerability |
nvd |
CVE-2026-112370 |
|
2026-10-19 |
| medium |
CVE-2025-36252 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library… |
vulnerability |
nvd |
CVE-2025-36252 |
|
2026-10-19 |
| medium |
CVE-2025-36069 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which… |
vulnerability |
nvd |
CVE-2025-36069 |
|
2026-10-19 |
| medium |
CVE-2025-36061 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4… |
vulnerability |
nvd |
CVE-2025-36061 |
|
2026-10-19 |
| high |
CVE-2026-53995 — MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend… |
vulnerability |
nvd |
CVE-2026-53995 |
|
2026-10-19 |
| unknown |
CVE-2026-112901 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to reg… |
vulnerability |
nvd |
CVE-2026-112901 |
|
2026-10-19 |
| unknown |
CVE-2026-112900 — Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument inject… |
vulnerability |
nvd |
CVE-2026-112900 |
|
2026-10-19 |
| unknown |
CVE-2026-112898 — Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack… |
vulnerability |
nvd |
CVE-2026-112898 |
|
2026-10-19 |
| unknown |
CVE-2026-112897 — Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory… |
vulnerability |
nvd |
CVE-2026-112897 |
|
2026-10-19 |
| unknown |
CVE-2026-112896 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMa… |
vulnerability |
nvd |
CVE-2026-112896 |
|
2026-10-19 |
| unknown |
CVE-2026-112895 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while pars… |
vulnerability |
nvd |
CVE-2026-112895 |
|
2026-10-19 |
| unknown |
CVE-2026-112894 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve… |
vulnerability |
nvd |
CVE-2026-112894 |
|
2026-10-19 |
| unknown |
CVE-2026-112893 — Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph point… |
vulnerability |
nvd |
CVE-2026-112893 |
|
2026-10-19 |
| unknown |
CVE-2026-112892 — Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a s… |
vulnerability |
nvd |
CVE-2026-112892 |
|
2026-10-19 |
| unknown |
CVE-2026-112891 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when… |
vulnerability |
nvd |
CVE-2026-112891 |
|
2026-10-19 |
| unknown |
CVE-2026-112406 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while… |
vulnerability |
nvd |
CVE-2026-112406 |
|
2026-10-19 |
| unknown |
CVE-2026-112405 — Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference… |
vulnerability |
nvd |
CVE-2026-112405 |
|
2026-10-19 |
| unknown |
CVE-2026-112404 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode path… |
vulnerability |
nvd |
CVE-2026-112404 |
|
2026-10-19 |
| unknown |
CVE-2026-112403 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width sc… |
vulnerability |
nvd |
CVE-2026-112403 |
|
2026-10-19 |
| unknown |
CVE-2026-112402 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when Imagin… |
vulnerability |
nvd |
CVE-2026-112402 |
|
2026-10-19 |
| unknown |
CVE-2026-112401 — Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while… |
vulnerability |
nvd |
CVE-2026-112401 |
|
2026-10-19 |
| unknown |
CVE-2026-112400 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame… |
vulnerability |
nvd |
CVE-2026-112400 |
|
2026-10-19 |
| unknown |
CVE-2026-112399 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal ba… |
vulnerability |
nvd |
CVE-2026-112399 |
|
2026-10-19 |
| unknown |
CVE-2026-112398 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write d… |
vulnerability |
nvd |
CVE-2026-112398 |
|
2026-10-19 |
| unknown |
CVE-2026-112397 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access… |
vulnerability |
nvd |
CVE-2026-112397 |
|
2026-10-19 |
| medium |
CVE-2026-112396 — Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when… |
vulnerability |
nvd |
CVE-2026-112396 |
|
2026-10-19 |
| unknown |
CVE-2026-112392 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference inv… |
vulnerability |
nvd |
CVE-2026-112392 |
|
2026-10-19 |
| medium |
CVE-2026-112361 — A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function… |
vulnerability |
nvd |
CVE-2026-112361 |
|
2026-10-19 |