| medium |
CVE-2026-3161 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that co… |
vulnerability |
nvd |
CVE-2026-3161 |
|
2026-10-19 |
| medium |
CVE-2026-1510 — IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. |
vulnerability |
nvd |
CVE-2026-1510 |
|
2026-10-19 |
| low |
CVE-2026-1501 — IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. |
vulnerability |
nvd |
CVE-2026-1501 |
|
2026-10-19 |
| medium |
CVE-2026-11319 — TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in… |
vulnerability |
nvd |
CVE-2026-11319 |
ransomware |
2026-10-19 |
| high |
CVE-2026-112377 — CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence… |
vulnerability |
nvd |
CVE-2026-112377 |
ransomware |
2026-10-19 |
| medium |
CVE-2026-112248 — A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the fun… |
vulnerability |
nvd |
CVE-2026-112248 |
|
2026-10-19 |
| medium |
CVE-2026-112247 — A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Manage… |
vulnerability |
nvd |
CVE-2026-112247 |
|
2026-10-19 |
| high |
CVE-2026-111759 — markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, spe… |
vulnerability |
nvd |
CVE-2026-111759 |
|
2026-10-19 |
| medium |
CVE-2026-111757 — Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 un… |
vulnerability |
nvd |
CVE-2026-111757 |
|
2026-10-19 |
| unknown |
CVE-2026-111755 — follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. Fr… |
vulnerability |
nvd |
CVE-2026-111755 |
|
2026-10-19 |
| unknown |
CVE-2026-107084 — Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) a… |
vulnerability |
nvd |
CVE-2026-107084 |
|
2026-10-19 |
| unknown |
CVE-2026-105810 — Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi… |
vulnerability |
nvd |
CVE-2026-105810 |
|
2026-10-19 |
| unknown |
CVE-2025-60480 — A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC… |
vulnerability |
nvd |
CVE-2025-60480 |
|
2026-10-19 |
| medium |
CVE-2025-55667 — A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV… |
vulnerability |
nvd |
CVE-2025-55667 |
|
2026-10-19 |
| unknown |
CVE-2025-55654 — A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box… |
vulnerability |
nvd |
CVE-2025-55654 |
|
2026-10-19 |
| high |
CVE-2025-52290 — A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-11… |
vulnerability |
nvd |
CVE-2025-52290 |
|
2026-10-19 |
| unknown |
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks |
news |
general-news |
|
|
2026-10-19 |
| unknown |
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor |
news |
general-news |
|
|
2026-10-19 |
| unknown |
OpenCode hack exposes API keys amid AI distillation attacks |
news |
general-news |
|
|
2026-10-19 |
| high |
CVE-2026-6930 — IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an… |
vulnerability |
nvd |
CVE-2026-6930, CVE-2026-6719 |
|
2026-10-19 |
| medium |
CVE-2026-15661 — IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due… |
vulnerability |
nvd |
CVE-2026-15661 |
|
2026-10-19 |
| medium |
CVE-2026-14511 — IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sen… |
vulnerability |
nvd |
CVE-2026-14511 |
|
2026-10-19 |
| medium |
CVE-2026-12727 — IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by… |
vulnerability |
nvd |
CVE-2026-12727 |
|
2026-10-19 |
| medium |
CVE-2026-12670 — IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafte… |
vulnerability |
nvd |
CVE-2026-12670 |
|
2026-10-19 |
| low |
CVE-2026-12669 — IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malf… |
vulnerability |
nvd |
CVE-2026-12669 |
|
2026-10-19 |
| high |
CVE-2026-12665 — IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when p… |
vulnerability |
nvd |
CVE-2026-12665 |
|
2026-10-19 |
| low |
CVE-2026-12660 — IBM MQ Web Console could allow an authenticated administrator to write files outside the intended di… |
vulnerability |
nvd |
CVE-2026-12660 |
|
2026-10-19 |
| medium |
CVE-2026-12350 — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially cra… |
vulnerability |
nvd |
CVE-2026-12350 |
|
2026-10-19 |
| medium |
CVE-2026-12155 — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially craft… |
vulnerability |
nvd |
CVE-2026-12155 |
|
2026-10-19 |
| high |
CVE-2026-12148 — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially ex… |
vulnerability |
nvd |
CVE-2026-12148 |
|
2026-10-19 |
| medium |
CVE-2026-11831 — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very li… |
vulnerability |
nvd |
CVE-2026-11831 |
|
2026-10-19 |
| medium |
CVE-2026-11829 — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation… |
vulnerability |
nvd |
CVE-2026-11829, CVE-2026-12343 |
|
2026-10-19 |
| medium |
CVE-2026-11828 — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unenc… |
vulnerability |
nvd |
CVE-2026-11828 |
|
2026-10-19 |
| medium |
CVE-2026-112195 — A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown funct… |
vulnerability |
nvd |
CVE-2026-112195 |
|
2026-10-19 |
| low |
CVE-2026-112193 — A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of th… |
vulnerability |
nvd |
CVE-2026-112193 |
|
2026-10-19 |
| medium |
CVE-2026-112190 — A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some… |
vulnerability |
nvd |
CVE-2026-112190 |
|
2026-10-19 |
| medium |
CVE-2026-112159 — A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an u… |
vulnerability |
nvd |
CVE-2026-112159 |
|
2026-10-19 |
| critical |
CVE-2026-111862 — Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.… |
vulnerability |
nvd |
CVE-2026-111862 |
supply-chain |
2026-10-19 |
| unknown |
CVE-2026-111749 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Hos… |
vulnerability |
nvd |
CVE-2026-111749 |
|
2026-10-19 |
| unknown |
CVE-2026-111748 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an… |
vulnerability |
nvd |
CVE-2026-111748 |
|
2026-10-19 |
| unknown |
CVE-2026-111066 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.1… |
vulnerability |
nvd |
CVE-2026-111066 |
|
2026-10-19 |
| unknown |
CVE-2026-111065 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max… |
vulnerability |
nvd |
CVE-2026-111065 |
|
2026-10-19 |
| unknown |
CVE-2026-111064 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, kee… |
vulnerability |
nvd |
CVE-2026-111064 |
|
2026-10-19 |
| unknown |
CVE-2026-111063 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the… |
vulnerability |
nvd |
CVE-2026-111063, CVE-2026-111750 |
|
2026-10-19 |
| medium |
CVE-2026-111061 — russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Pr… |
vulnerability |
nvd |
CVE-2026-111061 |
|
2026-10-19 |
| high |
CVE-2026-10743 — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to i… |
vulnerability |
nvd |
CVE-2026-10743 |
|
2026-10-19 |
| high |
CVE-2026-10572 — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb… |
vulnerability |
nvd |
CVE-2026-10572, CVE-2026-10574 |
|
2026-10-19 |
| critical |
CVE-2026-107188 — A user can upload export reports with any file contents and specify any contents. JSP code can be up… |
vulnerability |
nvd |
CVE-2026-107188 |
|
2026-10-19 |
| high |
CVE-2026-107187 — A user can access any database details, such as usernames and passwords by sending a DWR request wit… |
vulnerability |
nvd |
CVE-2026-107187 |
|
2026-10-19 |
| high |
CVE-2026-107186 — An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the n… |
vulnerability |
nvd |
CVE-2026-107186 |
|
2026-10-19 |