| unknown |
CVE-2026-43857 — A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with… |
vulnerability |
nvd |
CVE-2026-43857 |
|
2026-10-20 |
| unknown |
CVE-2026-43856 — A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remo… |
vulnerability |
nvd |
CVE-2026-43856 |
|
2026-10-20 |
| unknown |
CVE-2026-43855 — A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve ar… |
vulnerability |
nvd |
CVE-2026-43855 |
|
2026-10-20 |
| unknown |
CVE-2026-43854 — A vulnerability could allow an attacker with access to an encrypted project file to retrieve adminis… |
vulnerability |
nvd |
CVE-2026-43854 |
|
2026-10-20 |
| unknown |
CVE-2026-43853 — A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, cau… |
vulnerability |
nvd |
CVE-2026-43853 |
|
2026-10-20 |
| unknown |
CVE-2026-43852 — A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the s… |
vulnerability |
nvd |
CVE-2026-43852 |
|
2026-10-20 |
| unknown |
CVE-2026-43851 — A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the… |
vulnerability |
nvd |
CVE-2026-43851 |
|
2026-10-20 |
| unknown |
CVE-2026-43850 — A command injection vulnerability could allow an authenticated attacker to achieve root-level code e… |
vulnerability |
nvd |
CVE-2026-43850 |
|
2026-10-20 |
| unknown |
CVE-2026-43849 — A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. |
vulnerability |
nvd |
CVE-2026-43849 |
|
2026-10-20 |
| unknown |
CVE-2026-113468 — The payment notification endpoint for PayPal accepts incoming data without verifying that it comes f… |
vulnerability |
nvd |
CVE-2026-113468 |
|
2026-10-20 |
| unknown |
CVE-2026-113459 — In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend p… |
vulnerability |
nvd |
CVE-2026-113459 |
|
2026-10-20 |
| unknown |
CVE-2026-113442 — Values entered by visitors were placed into the HTML summary email without being escaped. An unauthe… |
vulnerability |
nvd |
CVE-2026-113442 |
|
2026-10-20 |
| high |
CVE-2026-113381 — A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the functio… |
vulnerability |
nvd |
CVE-2026-113381 |
|
2026-10-20 |
| medium |
CVE-2026-113378 — A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown func… |
vulnerability |
nvd |
CVE-2026-113378 |
|
2026-10-20 |
| unknown |
CVE-2026-112240 — The download link for files uploaded through a form relied on a token that could be predicted. The f… |
vulnerability |
nvd |
CVE-2026-112240 |
|
2026-10-20 |
| unknown |
CVE-2026-112239 — The extension provides a backend endpoint that writes a submitted value into a submitted field of a… |
vulnerability |
nvd |
CVE-2026-112239 |
|
2026-10-20 |
| unknown |
CVE-2026-112238 — The file search of the extension builds its database conditions by wrapping the search term in quote… |
vulnerability |
nvd |
CVE-2026-112238 |
|
2026-10-20 |
| unknown |
CVE-2026-112237 — The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one… |
vulnerability |
nvd |
CVE-2026-112237 |
|
2026-10-20 |
| unknown |
CVE-2026-112071 — The order cancellation function accepts an order identifier from the request and acts on that order… |
vulnerability |
nvd |
CVE-2026-112071 |
|
2026-10-20 |
| unknown |
CVE-2026-112070 — The AJAX routes of the extension do not check whether a backend user has access to the related modul… |
vulnerability |
nvd |
CVE-2026-112070 |
|
2026-10-20 |
| unknown |
CVE-2026-112069 — The extension no longer applied its access protection to files in file storages that use a non-defau… |
vulnerability |
nvd |
CVE-2026-112069 |
|
2026-10-20 |
| unknown |
CVE-2026-112068 — The backend module does not check whether a backend user has access to the requested site. Users wit… |
vulnerability |
nvd |
CVE-2026-112068 |
|
2026-10-20 |
| unknown |
CVE-2026-112067 — The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself.… |
vulnerability |
nvd |
CVE-2026-112067 |
|
2026-10-20 |
| unknown |
CVE-2026-112066 — The JSON import of the cookie consent configuration did not respect the backend user's permissions.… |
vulnerability |
nvd |
CVE-2026-112066 |
|
2026-10-20 |
| unknown |
CVE-2026-112065 — The routes that provide consent history and statistics data did not check whether the backend user h… |
vulnerability |
nvd |
CVE-2026-112065 |
|
2026-10-20 |
| unknown |
CVE-2026-112064 — The backend module for reviewing the consent history accepted sorting, grouping and index options fr… |
vulnerability |
nvd |
CVE-2026-112064 |
|
2026-10-20 |
| unknown |
US Army is developing AI agents that could strike enemy networks and vanish without a trace |
news |
general-news |
|
|
2026-10-20 |
| critical |
Defense contractors in two NATO allies hacked in recent Russia-linked campaign |
news |
general-news |
|
apt |
2026-10-20 |
| unknown |
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-92287 — Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0… |
vulnerability |
nvd |
CVE-2026-92287 |
|
2026-10-20 |
| unknown |
CVE-2026-43848 — A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker… |
vulnerability |
nvd |
CVE-2026-43848 |
|
2026-10-20 |
| unknown |
CVE-2026-43847 — A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator… |
vulnerability |
nvd |
CVE-2026-43847 |
|
2026-10-20 |
| unknown |
CVE-2026-43846 — A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated… |
vulnerability |
nvd |
CVE-2026-43846 |
|
2026-10-20 |
| unknown |
CVE-2026-43845 — A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication… |
vulnerability |
nvd |
CVE-2026-43845 |
|
2026-10-20 |
| unknown |
CVE-2026-43844 — A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mec… |
vulnerability |
nvd |
CVE-2026-43844 |
|
2026-10-20 |
| unknown |
CVE-2026-43843 — An integer overflow vulnerability in the license manager service could allow an unauthenticated atta… |
vulnerability |
nvd |
CVE-2026-43843 |
|
2026-10-20 |
| unknown |
CVE-2026-43840 — A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticat… |
vulnerability |
nvd |
CVE-2026-43840, CVE-2026-43841, CVE-2026-43842 |
|
2026-10-20 |
| unknown |
CVE-2026-43839 — A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthe… |
vulnerability |
nvd |
CVE-2026-43839 |
|
2026-10-20 |
| unknown |
CVE-2026-43838 — A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to ac… |
vulnerability |
nvd |
CVE-2026-43838 |
|
2026-10-20 |
| unknown |
CVE-2026-43837 — A buffer overflow vulnerability in the password verification functionality could allow an attacker w… |
vulnerability |
nvd |
CVE-2026-43837 |
|
2026-10-20 |
| unknown |
CVE-2026-43836 — A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum… |
vulnerability |
nvd |
CVE-2026-43836 |
|
2026-10-20 |
| medium |
CVE-2026-11960 — Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns dif… |
vulnerability |
nvd |
CVE-2026-11960 |
phishing |
2026-10-20 |
| unknown |
CVE-2026-11959 — Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate v… |
vulnerability |
nvd |
CVE-2026-11959 |
|
2026-10-20 |
| high |
CVE-2026-113469 — A failure has been identified in the SNS during dynamic data files signature check. A logic error in… |
vulnerability |
nvd |
CVE-2026-113469 |
|
2026-10-20 |
| medium |
CVE-2026-113465 — It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administ… |
vulnerability |
nvd |
CVE-2026-113465 |
|
2026-10-20 |
| unknown |
CVE-2026-101201 — A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behav… |
vulnerability |
nvd |
CVE-2026-101201 |
|
2026-10-20 |
| unknown |
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-43835 — A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to uploa… |
vulnerability |
nvd |
CVE-2026-43835 |
|
2026-10-20 |
| unknown |
CVE-2026-43834 — A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authen… |
vulnerability |
nvd |
CVE-2026-43834 |
|
2026-10-20 |
| high |
CVE-2026-113405 — BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attacke… |
vulnerability |
nvd |
CVE-2026-113405, CVE-2026-113406, CVE-2026-113407 |
|
2026-10-20 |