| unknown |
CVE-2026-108771 — Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apach… |
vulnerability |
nvd |
CVE-2026-108771 |
|
2026-10-19 |
| unknown |
CVE-2026-108766 — Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin service… |
vulnerability |
nvd |
CVE-2026-108766 |
|
2026-10-19 |
| unknown |
CVE-2026-108764 — Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job servi… |
vulnerability |
nvd |
CVE-2026-108764 |
|
2026-10-19 |
| unknown |
CVE-2026-108762 — Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin se… |
vulnerability |
nvd |
CVE-2026-108762 |
|
2026-10-19 |
| unknown |
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic |
news |
general-news |
|
|
2026-10-19 |
| medium |
ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks |
threat-intel |
otx |
CVE-2025-11371 | 144.172.64.99, 144.172.64.128, 144.172.64.60 |
m365, service principal, cloud backup, skykick, msp, connectwise |
2026-10-19 |
| unknown |
CVE-2026-13695 — SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec applic… |
vulnerability |
nvd |
CVE-2026-13695 |
|
2026-10-19 |
| unknown |
CVE-2026-112180 — MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, sever… |
vulnerability |
nvd |
CVE-2026-112180 |
|
2026-10-19 |
| unknown |
CVE-2026-112179 — In MISP, the event synchronization process contained a logic error in the preparation of event repor… |
vulnerability |
nvd |
CVE-2026-112179 |
|
2026-10-19 |
| unknown |
CVE-2026-112178 — MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The author… |
vulnerability |
nvd |
CVE-2026-112178 |
|
2026-10-19 |
| unknown |
CVE-2026-112161 — MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first veri… |
vulnerability |
nvd |
CVE-2026-112161 |
|
2026-10-19 |
| medium |
CVE-2026-112098 — A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of t… |
vulnerability |
nvd |
CVE-2026-112098 |
|
2026-10-19 |
| low |
CVE-2026-112097 — A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown pr… |
vulnerability |
nvd |
CVE-2026-112097 |
|
2026-10-19 |
| low |
CVE-2026-112096 — A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects un… |
vulnerability |
nvd |
CVE-2026-112096 |
|
2026-10-19 |
| low |
CVE-2026-112095 — A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the fi… |
vulnerability |
nvd |
CVE-2026-112095 |
|
2026-10-19 |
| medium |
CVE-2026-111438 — 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/… |
vulnerability |
nvd |
CVE-2026-111438 |
botnet |
2026-10-19 |
| high |
CVE-2026-104679 — VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.… |
vulnerability |
nvd |
CVE-2026-104679 |
|
2026-10-19 |
| medium |
CVE-2026-112094 — A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the funct… |
vulnerability |
nvd |
CVE-2026-112094 |
|
2026-10-19 |
| high |
CVE-2026-112093 — A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a144… |
vulnerability |
nvd |
CVE-2026-112093, CVE-2026-112139 |
|
2026-10-19 |
| medium |
CVE-2026-112092 — A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07e… |
vulnerability |
nvd |
CVE-2026-112092 |
|
2026-10-19 |
| medium |
CVE-2026-112091 — A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31… |
vulnerability |
nvd |
CVE-2026-112091 |
|
2026-10-19 |
| medium |
CVE-2026-112090 — A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c6… |
vulnerability |
nvd |
CVE-2026-112090 |
|
2026-10-19 |
| medium |
CVE-2026-111439 — 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存… |
vulnerability |
nvd |
CVE-2026-111439 |
|
2026-10-19 |
| medium |
CVE-2026-94294 — The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation befor… |
vulnerability |
nvd |
CVE-2026-94294 |
|
2026-10-19 |
| medium |
CVE-2026-94272 — The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommer… |
vulnerability |
nvd |
CVE-2026-94272 |
|
2026-10-19 |
| medium |
CVE-2026-94231 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of… |
vulnerability |
nvd |
CVE-2026-94231 |
|
2026-10-19 |
| medium |
CVE-2026-94230 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX… |
vulnerability |
nvd |
CVE-2026-94230 |
|
2026-10-19 |
| medium |
CVE-2026-94229 — The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking befor… |
vulnerability |
nvd |
CVE-2026-94229 |
|
2026-10-19 |
| medium |
CVE-2026-94228 — The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its set… |
vulnerability |
nvd |
CVE-2026-94228 |
|
2026-10-19 |
| low |
CVE-2026-91831 — The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a… |
vulnerability |
nvd |
CVE-2026-91831 |
|
2026-10-19 |
| medium |
CVE-2026-86791 — The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a pa… |
vulnerability |
nvd |
CVE-2026-86791 |
|
2026-10-19 |
| high |
CVE-2026-76740 — A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and… |
vulnerability |
nvd |
CVE-2026-76740 |
|
2026-10-19 |
| medium |
CVE-2026-74922 — The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unau… |
vulnerability |
nvd |
CVE-2026-74922 |
|
2026-10-19 |
| medium |
CVE-2026-74921 — The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shor… |
vulnerability |
nvd |
CVE-2026-74921 |
|
2026-10-19 |
| high |
CVE-2026-16460 — A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating… |
vulnerability |
nvd |
CVE-2026-16460 |
|
2026-10-19 |
| medium |
CVE-2026-112089 — A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a4… |
vulnerability |
nvd |
CVE-2026-112089 |
|
2026-10-19 |
| medium |
CVE-2026-112088 — A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319… |
vulnerability |
nvd |
CVE-2026-112088 |
|
2026-10-19 |
| medium |
CVE-2026-112087 — A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects s… |
vulnerability |
nvd |
CVE-2026-112087 |
|
2026-10-19 |
| low |
CVE-2026-110034 — The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when su… |
vulnerability |
nvd |
CVE-2026-110034 |
|
2026-10-19 |
| medium |
CVE-2026-106010 — The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on i… |
vulnerability |
nvd |
CVE-2026-106010 |
|
2026-10-19 |
| medium |
CVE-2026-103311 — The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify… |
vulnerability |
nvd |
CVE-2026-103311 |
|
2026-10-19 |
| unknown |
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers |
news |
general-news |
|
|
2026-10-19 |
| medium |
CVE-2026-94273 — The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's respons… |
vulnerability |
nvd |
CVE-2026-94273 |
|
2026-10-19 |
| medium |
CVE-2026-91047 — The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict acc… |
vulnerability |
nvd |
CVE-2026-91047 |
|
2026-10-19 |
| medium |
CVE-2026-91046 — The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization… |
vulnerability |
nvd |
CVE-2026-91046 |
|
2026-10-19 |
| medium |
CVE-2026-89286 — The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log… |
vulnerability |
nvd |
CVE-2026-89286 |
|
2026-10-19 |
| medium |
CVE-2026-76739 — A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superd… |
vulnerability |
nvd |
CVE-2026-76739 |
|
2026-10-19 |
| high |
CVE-2026-16487 — A flaw was found in bootc when operating with the default containers signature policy. Automatic or… |
vulnerability |
nvd |
CVE-2026-16487 |
|
2026-10-19 |
| medium |
CVE-2026-112086 — A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the… |
vulnerability |
nvd |
CVE-2026-112086 |
|
2026-10-19 |
| medium |
CVE-2026-112083 — A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function Wei… |
vulnerability |
nvd |
CVE-2026-112083 |
|
2026-10-19 |