| critical |
CVE-2026-107083 — SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio… |
vulnerability |
nvd |
CVE-2026-107083 |
|
2026-10-19 |
| unknown |
CVE-2026-107082 — Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perf… |
vulnerability |
nvd |
CVE-2026-107082 |
|
2026-10-19 |
| unknown |
CVE-2026-103038 — PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of… |
vulnerability |
nvd |
CVE-2026-103038 |
|
2026-10-19 |
| medium |
CVE-2025-7203 — The Management Console and product files expose sensitive data, including remote log server credenti… |
vulnerability |
nvd |
CVE-2025-7203 |
|
2026-10-19 |
| medium |
CVE-2025-7043 — The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be t… |
vulnerability |
nvd |
CVE-2025-7043 |
|
2026-10-19 |
| medium |
CVE-2025-6623 — The carbon console accepts user-supplied XML input without sufficiently encoding potentially executa… |
vulnerability |
nvd |
CVE-2025-6623 |
|
2026-10-19 |
| medium |
CVE-2025-13591 — The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response wh… |
vulnerability |
nvd |
CVE-2025-13591 |
phishing |
2026-10-19 |
| medium |
CVE-2025-13173 — Tokens associated with user sessions are not revoked when the corresponding user session is terminat… |
vulnerability |
nvd |
CVE-2025-13173 |
|
2026-10-19 |
| high |
CVE-2025-10149 — The SCIM endpoint does not sufficiently validate authorization for federated users when performing o… |
vulnerability |
nvd |
CVE-2025-10149 |
|
2026-10-19 |
| unknown |
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor |
news |
general-news |
|
|
2026-10-19 |
| unknown |
CVE-2026-12254 — Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Clie… |
vulnerability |
nvd |
CVE-2026-12254 |
|
2026-10-19 |
| high |
CVE-2026-112368 — An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an… |
vulnerability |
nvd |
CVE-2026-112368 |
|
2026-10-19 |
| high |
CVE-2026-112366 — Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows at… |
vulnerability |
nvd |
CVE-2026-112366 |
|
2026-10-19 |
| medium |
CVE-2026-112363 — Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker… |
vulnerability |
nvd |
CVE-2026-112363 |
|
2026-10-19 |
| medium |
CVE-2026-112310 — docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attacke… |
vulnerability |
nvd |
CVE-2026-112310 |
|
2026-10-19 |
| high |
CVE-2026-112309 — @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauth… |
vulnerability |
nvd |
CVE-2026-112309 |
|
2026-10-19 |
| high |
CVE-2026-112308 — crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapin… |
vulnerability |
nvd |
CVE-2026-112308 |
|
2026-10-19 |
| high |
CVE-2026-112307 — sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject P… |
vulnerability |
nvd |
CVE-2026-112307 |
|
2026-10-19 |
| high |
CVE-2026-112306 — NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that… |
vulnerability |
nvd |
CVE-2026-112306 |
|
2026-10-19 |
| high |
CVE-2026-112305 — Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with t… |
vulnerability |
nvd |
CVE-2026-112305 |
rce |
2026-10-19 |
| high |
CVE-2026-112304 — docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() tha… |
vulnerability |
nvd |
CVE-2026-112304 |
|
2026-10-19 |
| medium |
CVE-2026-112303 — GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers… |
vulnerability |
nvd |
CVE-2026-112303 |
|
2026-10-19 |
| medium |
CVE-2026-112158 — A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the functi… |
vulnerability |
nvd |
CVE-2026-112158 |
|
2026-10-19 |
| low |
CVE-2026-112157 — A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted elemen… |
vulnerability |
nvd |
CVE-2026-112157 |
|
2026-10-19 |
| high |
CVE-2026-112153 — A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365… |
vulnerability |
nvd |
CVE-2026-112153 |
|
2026-10-19 |
| high |
CVE-2026-112152 — A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc… |
vulnerability |
nvd |
CVE-2026-112152 |
|
2026-10-19 |
| critical |
CVE-2026-111058 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prio… |
vulnerability |
nvd |
CVE-2026-111058 |
|
2026-10-19 |
| critical |
CVE-2026-111057 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From… |
vulnerability |
nvd |
CVE-2026-111057, CVE-2026-111059 |
|
2026-10-19 |
| unknown |
CVE-2026-111053 — FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the un… |
vulnerability |
nvd |
CVE-2026-111053, CVE-2026-111056 |
|
2026-10-19 |
| unknown |
CVE-2026-111046 — FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasMan… |
vulnerability |
nvd |
CVE-2026-111046 |
|
2026-10-19 |
| high |
CVE-2026-111045 — CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink po… |
vulnerability |
nvd |
CVE-2026-111045 |
|
2026-10-19 |
| medium |
CVE-2026-109433 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerabili… |
vulnerability |
nvd |
CVE-2026-109433 |
|
2026-10-19 |
| critical |
CVE-2026-109432 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerabili… |
vulnerability |
nvd |
CVE-2026-109432 |
|
2026-10-19 |
| high |
CVE-2026-109431 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulne… |
vulnerability |
nvd |
CVE-2026-109431 |
|
2026-10-19 |
| high |
CVE-2026-107571 — Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 throug… |
vulnerability |
nvd |
CVE-2026-107571 |
|
2026-10-19 |
| high |
CVE-2026-107569 — Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a r… |
vulnerability |
nvd |
CVE-2026-107569 |
|
2026-10-19 |
| medium |
CVE-2026-107568 — Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply a… |
vulnerability |
nvd |
CVE-2026-107568 |
|
2026-10-19 |
| high |
CVE-2026-107567 — Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.… |
vulnerability |
nvd |
CVE-2026-107567 |
|
2026-10-19 |
| medium |
CVE-2026-107566 — Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set… |
vulnerability |
nvd |
CVE-2026-107566 |
|
2026-10-19 |
| unknown |
CVE-2026-107081 — SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJA… |
vulnerability |
nvd |
CVE-2026-107081 |
|
2026-10-19 |
| critical |
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw |
news |
general-news |
|
rce |
2026-10-19 |
| unknown |
Dispel Zero Trust Engine for OEMs to secure remote industrial service, standardize access, strengthen compliance |
advisory |
vendor-blogs |
|
|
2026-10-19 |
| unknown |
DHS to ban DeepSeek from federal civilian agencies |
news |
general-news |
|
|
2026-10-19 |
| unknown |
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds |
news |
general-news |
|
|
2026-10-19 |
| medium |
CVE-2026-86375 — Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive D… |
vulnerability |
nvd |
CVE-2026-86375 |
|
2026-10-19 |
| medium |
CVE-2026-112328 — The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the… |
vulnerability |
nvd |
CVE-2026-112328, CVE-2026-112329 |
|
2026-10-19 |
| high |
CVE-2026-112151 — A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a4873… |
vulnerability |
nvd |
CVE-2026-112151 |
|
2026-10-19 |
| high |
CVE-2026-112150 — A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519… |
vulnerability |
nvd |
CVE-2026-112150 |
|
2026-10-19 |
| high |
CVE-2026-112149 — A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a4873… |
vulnerability |
nvd |
CVE-2026-112149 |
|
2026-10-19 |
| medium |
CVE-2026-112147 — A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an… |
vulnerability |
nvd |
CVE-2026-112147 |
|
2026-10-19 |