| high |
CVE-2026-53995 — MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend… |
vulnerability |
nvd |
CVE-2026-53995 |
|
2026-10-19 |
| unknown |
CVE-2026-112901 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to reg… |
vulnerability |
nvd |
CVE-2026-112901 |
|
2026-10-19 |
| unknown |
CVE-2026-112900 — Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument inject… |
vulnerability |
nvd |
CVE-2026-112900 |
|
2026-10-19 |
| unknown |
CVE-2026-112898 — Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack… |
vulnerability |
nvd |
CVE-2026-112898 |
|
2026-10-19 |
| unknown |
CVE-2026-112897 — Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory… |
vulnerability |
nvd |
CVE-2026-112897 |
|
2026-10-19 |
| unknown |
CVE-2026-112896 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMa… |
vulnerability |
nvd |
CVE-2026-112896 |
|
2026-10-19 |
| unknown |
CVE-2026-112895 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while pars… |
vulnerability |
nvd |
CVE-2026-112895 |
|
2026-10-19 |
| unknown |
CVE-2026-112894 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve… |
vulnerability |
nvd |
CVE-2026-112894 |
|
2026-10-19 |
| unknown |
CVE-2026-112893 — Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph point… |
vulnerability |
nvd |
CVE-2026-112893 |
|
2026-10-19 |
| unknown |
CVE-2026-112892 — Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a s… |
vulnerability |
nvd |
CVE-2026-112892 |
|
2026-10-19 |
| unknown |
CVE-2026-112891 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when… |
vulnerability |
nvd |
CVE-2026-112891 |
|
2026-10-19 |
| unknown |
CVE-2026-112406 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while… |
vulnerability |
nvd |
CVE-2026-112406 |
|
2026-10-19 |
| unknown |
CVE-2026-112405 — Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference… |
vulnerability |
nvd |
CVE-2026-112405 |
|
2026-10-19 |
| unknown |
CVE-2026-112404 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode path… |
vulnerability |
nvd |
CVE-2026-112404 |
|
2026-10-19 |
| unknown |
CVE-2026-112403 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width sc… |
vulnerability |
nvd |
CVE-2026-112403 |
|
2026-10-19 |
| unknown |
CVE-2026-112402 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when Imagin… |
vulnerability |
nvd |
CVE-2026-112402 |
|
2026-10-19 |
| unknown |
CVE-2026-112401 — Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while… |
vulnerability |
nvd |
CVE-2026-112401 |
|
2026-10-19 |
| unknown |
CVE-2026-112400 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame… |
vulnerability |
nvd |
CVE-2026-112400 |
|
2026-10-19 |
| unknown |
CVE-2026-112399 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal ba… |
vulnerability |
nvd |
CVE-2026-112399 |
|
2026-10-19 |
| unknown |
CVE-2026-112398 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write d… |
vulnerability |
nvd |
CVE-2026-112398 |
|
2026-10-19 |
| unknown |
CVE-2026-112397 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access… |
vulnerability |
nvd |
CVE-2026-112397 |
|
2026-10-19 |
| medium |
CVE-2026-112396 — Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when… |
vulnerability |
nvd |
CVE-2026-112396 |
|
2026-10-19 |
| unknown |
CVE-2026-112392 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference inv… |
vulnerability |
nvd |
CVE-2026-112392 |
|
2026-10-19 |
| medium |
CVE-2026-112361 — A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function… |
vulnerability |
nvd |
CVE-2026-112361 |
|
2026-10-19 |
| high |
CVE-2026-112360 — A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the f… |
vulnerability |
nvd |
CVE-2026-112360 |
|
2026-10-19 |
| medium |
CVE-2026-112358 — A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. T… |
vulnerability |
nvd |
CVE-2026-112358 |
|
2026-10-19 |
| high |
CVE-2026-112261 — A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path… |
vulnerability |
nvd |
CVE-2026-112261 |
|
2026-10-19 |
| high |
CVE-2026-112258 — A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list wh… |
vulnerability |
nvd |
CVE-2026-112258 |
|
2026-10-19 |
| high |
CVE-2026-112257 — A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with… |
vulnerability |
nvd |
CVE-2026-112257 |
|
2026-10-19 |
| high |
CVE-2026-105815 — TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through una… |
vulnerability |
nvd |
CVE-2026-105815 |
botnet |
2026-10-19 |
| high |
CVE-2026-105814 — TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafte… |
vulnerability |
nvd |
CVE-2026-105814 |
botnet |
2026-10-19 |
| unknown |
Nikkei discloses third data breach in a month, 1.8M records exposed |
news |
general-news |
|
|
2026-10-19 |
| high |
WordPress SEO plugin Rank Math compromised to backdoor websites |
news |
general-news |
|
supply-chain |
2026-10-19 |
| high |
CVE-2026-76788 — The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes r… |
vulnerability |
nvd |
CVE-2026-76788 |
|
2026-10-19 |
| medium |
CVE-2026-76787 — The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library… |
vulnerability |
nvd |
CVE-2026-76787 |
|
2026-10-19 |
| medium |
CVE-2026-112395 — Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read pa… |
vulnerability |
nvd |
CVE-2026-112395 |
|
2026-10-19 |
| unknown |
CVE-2026-112394 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read pa… |
vulnerability |
nvd |
CVE-2026-112394 |
|
2026-10-19 |
| unknown |
CVE-2026-112393 — Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and s… |
vulnerability |
nvd |
CVE-2026-112393 |
|
2026-10-19 |
| unknown |
CVE-2026-112391 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recu… |
vulnerability |
nvd |
CVE-2026-112391 |
|
2026-10-19 |
| unknown |
CVE-2026-112390 — Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while… |
vulnerability |
nvd |
CVE-2026-112390 |
|
2026-10-19 |
| medium |
CVE-2026-112302 — A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function Archiv… |
vulnerability |
nvd |
CVE-2026-112302 |
|
2026-10-19 |
| high |
CVE-2026-112301 — A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue… |
vulnerability |
nvd |
CVE-2026-112301 |
|
2026-10-19 |
| medium |
CVE-2026-112300 — A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is th… |
vulnerability |
nvd |
CVE-2026-112300 |
|
2026-10-19 |
| medium |
CVE-2026-112299 — A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affec… |
vulnerability |
nvd |
CVE-2026-112299 |
|
2026-10-19 |
| unknown |
CVE-2026-111946 — Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the d… |
vulnerability |
nvd |
CVE-2026-111946 |
|
2026-10-19 |
| high |
CVE-2026-82166 — Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical F… |
vulnerability |
nvd |
CVE-2026-82166 |
|
2026-10-19 |
| high |
CVE-2026-71170 — Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerabi… |
vulnerability |
nvd |
CVE-2026-71170 |
|
2026-10-19 |
| high |
CVE-2026-71169 — Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for… |
vulnerability |
nvd |
CVE-2026-71169 |
|
2026-10-19 |
| high |
CVE-2026-112782 — Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability… |
vulnerability |
nvd |
CVE-2026-112782 |
|
2026-10-19 |
| medium |
CVE-2026-112781 — Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page edito… |
vulnerability |
nvd |
CVE-2026-112781 |
|
2026-10-19 |