| high |
CVE-2026-112780 — Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to… |
vulnerability |
nvd |
CVE-2026-112780 |
|
2026-10-19 |
| critical |
CVE-2026-112779 — Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for ever… |
vulnerability |
nvd |
CVE-2026-112779 |
|
2026-10-19 |
| unknown |
CVE-2026-112778 — Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Servi… |
vulnerability |
nvd |
CVE-2026-112778 |
|
2026-10-19 |
| high |
CVE-2026-112777 — Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() f… |
vulnerability |
nvd |
CVE-2026-112777 |
rce |
2026-10-19 |
| critical |
CVE-2026-112776 — Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-s… |
vulnerability |
nvd |
CVE-2026-112776 |
|
2026-10-19 |
| high |
CVE-2026-112775 — Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attac… |
vulnerability |
nvd |
CVE-2026-112775 |
|
2026-10-19 |
| high |
CVE-2026-112774 — Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authen… |
vulnerability |
nvd |
CVE-2026-112774 |
rce |
2026-10-19 |
| high |
CVE-2026-112772 — Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authen… |
vulnerability |
nvd |
CVE-2026-112772, CVE-2026-112773 |
rce |
2026-10-19 |
| medium |
CVE-2026-112771 — Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass becau… |
vulnerability |
nvd |
CVE-2026-112771 |
|
2026-10-19 |
| high |
CVE-2026-112770 — Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in… |
vulnerability |
nvd |
CVE-2026-112770 |
rce |
2026-10-19 |
| unknown |
CVE-2026-112769 — Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField… |
vulnerability |
nvd |
CVE-2026-112769 |
|
2026-10-19 |
| unknown |
CVE-2026-112768 — Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target accou… |
vulnerability |
nvd |
CVE-2026-112768 |
|
2026-10-19 |
| medium |
CVE-2026-112297 — A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the func… |
vulnerability |
nvd |
CVE-2026-112297 |
|
2026-10-19 |
| high |
CVE-2026-112260 — A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a hea… |
vulnerability |
nvd |
CVE-2026-112260 |
|
2026-10-19 |
| medium |
CVE-2026-112254 — A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is t… |
vulnerability |
nvd |
CVE-2026-112254 |
|
2026-10-19 |
| low |
CVE-2026-111766 — markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark pre… |
vulnerability |
nvd |
CVE-2026-111766 |
|
2026-10-19 |
| unknown |
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery |
news |
general-news |
|
|
2026-10-19 |
| high |
ConnectWise suspends Cloud Backup service after supply chain attack |
news |
general-news |
|
supply-chain |
2026-10-19 |
| unknown |
Hackers hijack AOMEI update servers to secretly spread malware |
news |
general-news |
|
|
2026-10-19 |
| unknown |
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs |
news |
general-news |
|
|
2026-10-19 |
| medium |
CVE-2026-112259 — A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause… |
vulnerability |
nvd |
CVE-2026-112259 |
|
2026-10-19 |
| high |
CVE-2026-112252 — A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production… |
vulnerability |
nvd |
CVE-2026-112252 |
|
2026-10-19 |
| medium |
CVE-2026-112251 — A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRe… |
vulnerability |
nvd |
CVE-2026-112251 |
|
2026-10-19 |
| low |
CVE-2026-112249 — A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw… |
vulnerability |
nvd |
CVE-2026-112249 |
|
2026-10-19 |
| unknown |
CVE-2026-110688 — Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the… |
vulnerability |
nvd |
CVE-2026-110688 |
|
2026-10-19 |
| unknown |
CVE-2026-110687 — Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical… |
vulnerability |
nvd |
CVE-2026-110687 |
|
2026-10-19 |
| unknown |
CVE-2026-110686 — Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itse… |
vulnerability |
nvd |
CVE-2026-110686 |
|
2026-10-19 |
| unknown |
CVE-2026-110685 — Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its… |
vulnerability |
nvd |
CVE-2026-110685 |
|
2026-10-19 |
| unknown |
CVE-2026-110684 — Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects… |
vulnerability |
nvd |
CVE-2026-110684 |
|
2026-10-19 |
| unknown |
CVE-2026-110682 — Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value… |
vulnerability |
nvd |
CVE-2026-110682 |
|
2026-10-19 |
| unknown |
CVE-2026-110681 — Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser ob… |
vulnerability |
nvd |
CVE-2026-110681 |
|
2026-10-19 |
| unknown |
CVE-2026-110680 — Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared h… |
vulnerability |
nvd |
CVE-2026-110680 |
|
2026-10-19 |
| unknown |
CVE-2026-110678 — Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental inpu… |
vulnerability |
nvd |
CVE-2026-110678 |
|
2026-10-19 |
| unknown |
CVE-2026-110677 — Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key val… |
vulnerability |
nvd |
CVE-2026-110677 |
|
2026-10-19 |
| unknown |
CVE-2026-110676 — Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation… |
vulnerability |
nvd |
CVE-2026-110676 |
|
2026-10-19 |
| unknown |
CVE-2026-110675 — Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys un… |
vulnerability |
nvd |
CVE-2026-110675 |
|
2026-10-19 |
| unknown |
CVE-2026-110674 — Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowin… |
vulnerability |
nvd |
CVE-2026-110674 |
|
2026-10-19 |
| unknown |
CVE-2026-110673 — Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under… |
vulnerability |
nvd |
CVE-2026-110673 |
|
2026-10-19 |
| unknown |
CVE-2026-110672 — Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a dupl… |
vulnerability |
nvd |
CVE-2026-110672 |
|
2026-10-19 |
| critical |
CVE-2026-109437 — Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defau… |
vulnerability |
nvd |
CVE-2026-109437 |
rce |
2026-10-19 |
| medium |
CVE-2026-109434 — Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows re… |
vulnerability |
nvd |
CVE-2026-109434 |
ransomware, phishing |
2026-10-19 |
| unknown |
CVE-2025-60482 — A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project… |
vulnerability |
nvd |
CVE-2025-60482 |
|
2026-10-19 |
| unknown |
Bullhorn takes staffing platform offline to contain cyberattack |
news |
general-news |
|
|
2026-10-19 |
| unknown |
CVE-2026-55644 — Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails… |
vulnerability |
nvd |
CVE-2026-55644 |
|
2026-10-19 |
| medium |
CVE-2026-4418 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated… |
vulnerability |
nvd |
CVE-2026-4418 |
|
2026-10-19 |
| medium |
CVE-2026-4413 — IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an un… |
vulnerability |
nvd |
CVE-2026-4413 |
|
2026-10-19 |
| medium |
CVE-2026-4405 — IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by anothe… |
vulnerability |
nvd |
CVE-2026-4405 |
|
2026-10-19 |
| medium |
CVE-2026-3628 — IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. |
vulnerability |
nvd |
CVE-2026-3628 |
|
2026-10-19 |
| low |
CVE-2026-3303 — IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacke… |
vulnerability |
nvd |
CVE-2026-3303 |
|
2026-10-19 |
| high |
CVE-2026-3295 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑su… |
vulnerability |
nvd |
CVE-2026-3295 |
|
2026-10-19 |