| high |
CVE-2026-112177 — A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2… |
vulnerability |
nvd |
CVE-2026-112177 |
|
2026-10-20 |
| high |
CVE-2026-111090 — A logic error exists in the signature verification routine resulting in acceptance of unauthenticate… |
vulnerability |
nvd |
CVE-2026-111090 |
|
2026-10-20 |
| medium |
CVE-2026-93878 — The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_l… |
vulnerability |
nvd |
CVE-2026-93878 |
|
2026-10-20 |
| high |
CVE-2026-113404 — WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attack… |
vulnerability |
nvd |
CVE-2026-113404 |
|
2026-10-20 |
| medium |
CVE-2026-113403 — ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticat… |
vulnerability |
nvd |
CVE-2026-113403 |
|
2026-10-20 |
| medium |
CVE-2026-113402 — ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenti… |
vulnerability |
nvd |
CVE-2026-113402 |
|
2026-10-20 |
| unknown |
CVE-2026-112148 — A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cr… |
vulnerability |
nvd |
CVE-2026-112148 |
|
2026-10-20 |
| medium |
CVE-2026-110180 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2… |
vulnerability |
nvd |
CVE-2026-110180 |
|
2026-10-20 |
| medium |
CVE-2026-110095 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4… |
vulnerability |
nvd |
CVE-2026-110095, CVE-2026-110306, CVE-2026-110725 |
|
2026-10-20 |
| unknown |
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan |
news |
general-news |
|
|
2026-10-20 |
| unknown |
How to Get Your Freezers (and Other Stuff) Off the Internet! |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
CVE-2026-96903 — The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on s… |
vulnerability |
nvd |
CVE-2026-96903 |
|
2026-10-20 |
| unknown |
CVE-2026-96902 — The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it… |
vulnerability |
nvd |
CVE-2026-96902 |
|
2026-10-20 |
| high |
CVE-2026-93300 — The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email'… |
vulnerability |
nvd |
CVE-2026-93300 |
|
2026-10-20 |
| unknown |
CVE-2026-100737 — Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Elec… |
vulnerability |
nvd |
CVE-2026-100737, CVE-2026-97627 |
|
2026-10-20 |
| high |
CVE-2026-113386 — Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A rem… |
vulnerability |
nvd |
CVE-2026-113386 |
|
2026-10-20 |
| unknown |
CVE-2026-113380 — In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interf… |
vulnerability |
nvd |
CVE-2026-113380 |
|
2026-10-20 |
| unknown |
CVE-2026-109831 — UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an… |
vulnerability |
nvd |
CVE-2026-109831 |
|
2026-10-20 |
| unknown |
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-86467 — Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authenticat… |
vulnerability |
nvd |
CVE-2026-86467 |
|
2026-10-20 |
| medium |
CVE-2026-12489 — An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware… |
vulnerability |
nvd |
CVE-2026-12489 |
|
2026-10-20 |
| unknown |
CVE-2026-75753 — Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby… |
vulnerability |
nvd |
CVE-2026-75753 |
|
2026-10-20 |
| unknown |
CVE-2026-17518 — Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenti… |
vulnerability |
nvd |
CVE-2026-17518 |
|
2026-10-20 |
| high |
CVE-2026-105299 — Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream reques… |
vulnerability |
nvd |
CVE-2026-105299 |
|
2026-10-20 |
| unknown |
CVE-2026-102438 — An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execut… |
vulnerability |
nvd |
CVE-2026-102438 |
|
2026-10-20 |
| medium |
CVE-2026-86981 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac… |
vulnerability |
nvd |
CVE-2026-86981 |
|
2026-10-20 |
| medium |
CVE-2026-86979 — A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An… |
vulnerability |
nvd |
CVE-2026-86979 |
|
2026-10-20 |
| unknown |
CVE-2026-86977 — An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS… |
vulnerability |
nvd |
CVE-2026-86977 |
|
2026-10-20 |
| medium |
CVE-2026-86975 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and… |
vulnerability |
nvd |
CVE-2026-86975 |
|
2026-10-20 |
| medium |
CVE-2026-86963 — A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2… |
vulnerability |
nvd |
CVE-2026-86963 |
|
2026-10-20 |
| medium |
CVE-2026-86962 — A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 a… |
vulnerability |
nvd |
CVE-2026-86962 |
|
2026-10-20 |
| high |
CVE-2026-86961 — A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS… |
vulnerability |
nvd |
CVE-2026-86961 |
|
2026-10-20 |
| unknown |
CVE-2026-86959 — An input validation issue was addressed with improved input validation. This issue is fixed in iOS 2… |
vulnerability |
nvd |
CVE-2026-86959 |
|
2026-10-20 |
| medium |
CVE-2026-86957 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 a… |
vulnerability |
nvd |
CVE-2026-86957 |
|
2026-10-20 |
| medium |
CVE-2026-86955 — An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a… |
vulnerability |
nvd |
CVE-2026-86955, CVE-2026-86976 |
|
2026-10-20 |
| high |
CVE-2026-86948 — This issue was addressed by enforcing library validation on the affected binaries. This issue is fix… |
vulnerability |
nvd |
CVE-2026-86948, CVE-2026-86949 |
|
2026-10-20 |
| unknown |
CVE-2026-86940 — This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 2… |
vulnerability |
nvd |
CVE-2026-86940 |
|
2026-10-20 |
| unknown |
CVE-2026-86935 — This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Ga… |
vulnerability |
nvd |
CVE-2026-86935 |
|
2026-10-20 |
| unknown |
CVE-2026-86933 — A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS… |
vulnerability |
nvd |
CVE-2026-86933 |
|
2026-10-20 |
| medium |
CVE-2026-86932 — An authorization issue was addressed with improved state management. This issue is fixed in macOS Go… |
vulnerability |
nvd |
CVE-2026-86932 |
|
2026-10-20 |
| medium |
CVE-2026-86928 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga… |
vulnerability |
nvd |
CVE-2026-86928 |
|
2026-10-20 |
| high |
CVE-2026-86922 — A type confusion issue was addressed with improved state management. This issue is fixed in Safari 2… |
vulnerability |
nvd |
CVE-2026-86922 |
|
2026-10-20 |
| medium |
CVE-2026-86921 — A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPad… |
vulnerability |
nvd |
CVE-2026-86921 |
|
2026-10-20 |
| unknown |
CVE-2026-86919 — A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and i… |
vulnerability |
nvd |
CVE-2026-86919 |
|
2026-10-20 |
| unknown |
CVE-2026-86915 — A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. A… |
vulnerability |
nvd |
CVE-2026-86915 |
|
2026-10-20 |
| unknown |
CVE-2026-86914 — An information disclosure issue was addressed with improved state management. This issue is fixed in… |
vulnerability |
nvd |
CVE-2026-86914 |
|
2026-10-20 |
| unknown |
CVE-2026-86913 — A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.… |
vulnerability |
nvd |
CVE-2026-86913 |
|
2026-10-20 |
| unknown |
CVE-2026-86907 — An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS… |
vulnerability |
nvd |
CVE-2026-86907 |
|
2026-10-20 |
| unknown |
CVE-2026-86875 — An input validation issue was addressed with improved input validation. This issue is fixed in Xcode… |
vulnerability |
nvd |
CVE-2026-86875 |
|
2026-10-20 |
| unknown |
CVE-2026-86874 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27.… |
vulnerability |
nvd |
CVE-2026-86874 |
|
2026-10-20 |