| medium |
CVE-2026-85248 — Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab… |
vulnerability |
nvd |
CVE-2026-85248 |
|
2026-10-19 |
| medium |
CVE-2026-85247 — Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects… |
vulnerability |
nvd |
CVE-2026-85247 |
|
2026-10-19 |
| medium |
CVE-2026-85246 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina comp… |
vulnerability |
nvd |
CVE-2026-85246 |
|
2026-10-19 |
| medium |
CVE-2026-85245 — Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue… |
vulnerability |
nvd |
CVE-2026-85245 |
|
2026-10-19 |
| medium |
CVE-2026-85243 — Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. Thi… |
vulnerability |
nvd |
CVE-2026-85243 |
|
2026-10-19 |
| medium |
CVE-2026-84181 — Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Cam… |
vulnerability |
nvd |
CVE-2026-84181 |
|
2026-10-19 |
| medium |
CVE-2026-84180 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative c… |
vulnerability |
nvd |
CVE-2026-84180 |
|
2026-10-19 |
| medium |
CVE-2026-84178 — Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects… |
vulnerability |
nvd |
CVE-2026-84178 |
|
2026-10-19 |
| medium |
CVE-2026-84176 — Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Ve… |
vulnerability |
nvd |
CVE-2026-84176 |
|
2026-10-19 |
| high |
CVE-2026-83531 — Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elemen… |
vulnerability |
nvd |
CVE-2026-83531 |
|
2026-10-19 |
| high |
CVE-2026-80344 — Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects A… |
vulnerability |
nvd |
CVE-2026-80344 |
|
2026-10-19 |
| high |
CVE-2026-80343 — Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue… |
vulnerability |
nvd |
CVE-2026-80343 |
|
2026-10-19 |
| high |
CVE-2026-80312 — Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Cam… |
vulnerability |
nvd |
CVE-2026-80312 |
|
2026-10-19 |
| high |
CVE-2026-79983 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac… |
vulnerability |
nvd |
CVE-2026-79983, CVE-2026-79984, CVE-2026-79985, CVE-2026-79986 |
|
2026-10-19 |
| high |
CVE-2026-78165 — Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue a… |
vulnerability |
nvd |
CVE-2026-78165 |
|
2026-10-19 |
| high |
CVE-2026-78164 — Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Info… |
vulnerability |
nvd |
CVE-2026-78164 |
|
2026-10-19 |
| medium |
CVE-2026-78163 — Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Pa… |
vulnerability |
nvd |
CVE-2026-78163 |
|
2026-10-19 |
| critical |
CVE-2026-78162 — Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: fr… |
vulnerability |
nvd |
CVE-2026-78162 |
rce |
2026-10-19 |
| unknown |
CVE-2026-71253 — Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in… |
vulnerability |
nvd |
CVE-2026-71253 |
|
2026-10-19 |
| low |
CVE-2026-112106 — A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497b… |
vulnerability |
nvd |
CVE-2026-112106 |
|
2026-10-19 |
| low |
CVE-2026-112105 — A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the functi… |
vulnerability |
nvd |
CVE-2026-112105 |
|
2026-10-19 |
| high |
CVE-2026-112104 — A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknow… |
vulnerability |
nvd |
CVE-2026-112104 |
ransomware |
2026-10-19 |
| low |
CVE-2026-112103 — A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects th… |
vulnerability |
nvd |
CVE-2026-112103 |
|
2026-10-19 |
| unknown |
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants |
news |
general-news |
|
|
2026-10-19 |
| critical |
CVE-2026-90910 — Missing authentication for critical function vulnerability in Apache Answer. This issue affects Apac… |
vulnerability |
nvd |
CVE-2026-90910 |
|
2026-10-19 |
| unknown |
CVE-2026-86589 — Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affe… |
vulnerability |
nvd |
CVE-2026-86589 |
|
2026-10-19 |
| unknown |
CVE-2026-79633 — vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorizati… |
vulnerability |
nvd |
CVE-2026-79633 |
|
2026-10-19 |
| unknown |
CVE-2026-79624 — Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: th… |
vulnerability |
nvd |
CVE-2026-79624 |
|
2026-10-19 |
| unknown |
CVE-2026-79620 — Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue af… |
vulnerability |
nvd |
CVE-2026-79620 |
|
2026-10-19 |
| unknown |
CVE-2026-79613 — vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated att… |
vulnerability |
nvd |
CVE-2026-79613 |
|
2026-10-19 |
| unknown |
CVE-2026-76994 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issu… |
vulnerability |
nvd |
CVE-2026-76994 |
|
2026-10-19 |
| unknown |
CVE-2026-68482 — Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.… |
vulnerability |
nvd |
CVE-2026-68482, CVE-2026-71563 |
|
2026-10-19 |
| unknown |
CVE-2026-67249 — A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A verification co… |
vulnerability |
nvd |
CVE-2026-67249 |
|
2026-10-19 |
| unknown |
CVE-2026-64945 — A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question oper… |
vulnerability |
nvd |
CVE-2026-64945 |
|
2026-10-19 |
| critical |
CVE-2026-64943 — Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects… |
vulnerability |
nvd |
CVE-2026-64943 |
ransomware |
2026-10-19 |
| unknown |
CVE-2026-112192 — MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds mo… |
vulnerability |
nvd |
CVE-2026-112192 |
|
2026-10-19 |
| unknown |
CVE-2026-112188 — MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated u… |
vulnerability |
nvd |
CVE-2026-112188 |
|
2026-10-19 |
| unknown |
CVE-2026-112184 — MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface.… |
vulnerability |
nvd |
CVE-2026-112184 |
|
2026-10-19 |
| unknown |
CVE-2026-112183 — MISP contains a CSS injection vulnerability in the remote event preview feature. When a user preview… |
vulnerability |
nvd |
CVE-2026-112183 |
|
2026-10-19 |
| medium |
CVE-2026-112102 — A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFun… |
vulnerability |
nvd |
CVE-2026-112102 |
|
2026-10-19 |
| medium |
CVE-2026-112101 — A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected e… |
vulnerability |
nvd |
CVE-2026-112101 |
|
2026-10-19 |
| medium |
CVE-2026-112100 — A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelin… |
vulnerability |
nvd |
CVE-2026-112100 |
|
2026-10-19 |
| high |
CVE-2026-111408 — Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-ne… |
vulnerability |
nvd |
CVE-2026-111408 |
|
2026-10-19 |
| critical |
CVE-2026-111406 — Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG… |
vulnerability |
nvd |
CVE-2026-111406 |
|
2026-10-19 |
| high |
CVE-2026-111398 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT N… |
vulnerability |
nvd |
CVE-2026-111398 |
|
2026-10-19 |
| medium |
CVE-2026-110898 — Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential… |
vulnerability |
nvd |
CVE-2026-110898 |
|
2026-10-19 |
| unknown |
CVE-2026-108837 — Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacke… |
vulnerability |
nvd |
CVE-2026-108837 |
|
2026-10-19 |
| unknown |
CVE-2026-108833 — Default startup profile miss security settings in Apache Kylin. Any deployment has security setting… |
vulnerability |
nvd |
CVE-2026-108833 |
|
2026-10-19 |
| unknown |
CVE-2026-108823 — Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin.… |
vulnerability |
nvd |
CVE-2026-108823 |
|
2026-10-19 |
| unknown |
CVE-2026-108780 — Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, u… |
vulnerability |
nvd |
CVE-2026-108780 |
|
2026-10-19 |