| high |
CVE-2026-113725 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash a… |
vulnerability |
nvd |
CVE-2026-113725 |
|
2026-10-20 |
| medium |
CVE-2026-113724 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_d… |
vulnerability |
nvd |
CVE-2026-113724 |
|
2026-10-20 |
| unknown |
CVE-2026-113723 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-sup… |
vulnerability |
nvd |
CVE-2026-113723 |
|
2026-10-20 |
| high |
CVE-2026-113722 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv… |
vulnerability |
nvd |
CVE-2026-113722 |
|
2026-10-20 |
| medium |
CVE-2026-113721 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplat… |
vulnerability |
nvd |
CVE-2026-113721 |
|
2026-10-20 |
| unknown |
CVE-2026-113720 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-da… |
vulnerability |
nvd |
CVE-2026-113720 |
|
2026-10-20 |
| medium |
CVE-2026-113719 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall… |
vulnerability |
nvd |
CVE-2026-113719 |
|
2026-10-20 |
| unknown |
CVE-2026-113718 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xons… |
vulnerability |
nvd |
CVE-2026-113718 |
|
2026-10-20 |
| unknown |
CVE-2026-113717 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.… |
vulnerability |
nvd |
CVE-2026-113717 |
|
2026-10-20 |
| medium |
CVE-2026-113716 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builti… |
vulnerability |
nvd |
CVE-2026-113716 |
|
2026-10-20 |
| unknown |
CVE-2026-113715 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib… |
vulnerability |
nvd |
CVE-2026-113715 |
|
2026-10-20 |
| critical |
CVE-2026-112380 — Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a… |
vulnerability |
nvd |
CVE-2026-112380 |
|
2026-10-20 |
| medium |
CVE-2026-107692 — The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first d… |
vulnerability |
nvd |
CVE-2026-107692 |
ransomware |
2026-10-20 |
| unknown |
Zeabur shutting down after second security breach in two months |
news |
general-news |
|
|
2026-10-20 |
| unknown |
California warns all public school students of data stolen in contractor breach |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-97406 — XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly i… |
vulnerability |
nvd |
CVE-2026-97406 |
|
2026-10-20 |
| unknown |
CVE-2026-21266 — Rejected reason: this CVE was issued in error. |
vulnerability |
nvd |
CVE-2026-21266, CVE-2026-21270, CVE-2026-21356, CVE-2026-48279, CVE-2026-75747, CVE-2026-75751, CVE-2026-75997 |
|
2026-10-20 |
| high |
CVE-2026-113808 — A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive… |
vulnerability |
nvd |
CVE-2026-113808, CVE-2026-113810 |
|
2026-10-20 |
| unknown |
CVE-2026-113714 — virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_w… |
vulnerability |
nvd |
CVE-2026-113714 |
|
2026-10-20 |
| unknown |
CVE-2026-113713 — virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10,… |
vulnerability |
nvd |
CVE-2026-113713 |
|
2026-10-20 |
| unknown |
CVE-2026-113712 — Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scr… |
vulnerability |
nvd |
CVE-2026-113712 |
|
2026-10-20 |
| critical |
CVE-2026-113709 — Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3… |
vulnerability |
nvd |
CVE-2026-113709 |
botnet |
2026-10-20 |
| critical |
CVE-2026-113708 — Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3… |
vulnerability |
nvd |
CVE-2026-113708 |
botnet |
2026-10-20 |
| medium |
CVE-2026-113643 — A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProv… |
vulnerability |
nvd |
CVE-2026-113643 |
|
2026-10-20 |
| high |
CVE-2026-111767 — MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Fr… |
vulnerability |
nvd |
CVE-2026-111767 |
|
2026-10-20 |
| medium |
CVE-2026-111088 — A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. |
vulnerability |
nvd |
CVE-2026-111088 |
|
2026-10-20 |
| high |
CVE-2026-100134 — Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary… |
vulnerability |
nvd |
CVE-2026-100134 |
|
2026-10-20 |
| medium |
CVE-2026-100132 — Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of… |
vulnerability |
nvd |
CVE-2026-100132 |
|
2026-10-20 |
| unknown |
23andMe successor settles with California for $6 million over cybersecurity failings |
news |
general-news |
|
|
2026-10-20 |
| critical |
CVE-2026-113802 — Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability… |
vulnerability |
nvd |
CVE-2026-113802 |
|
2026-10-20 |
| medium |
CVE-2026-113710 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service… |
vulnerability |
nvd |
CVE-2026-113710 |
|
2026-10-20 |
| critical |
CVE-2026-113672 — Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3… |
vulnerability |
nvd |
CVE-2026-113672 |
botnet |
2026-10-20 |
| medium |
CVE-2026-113671 — ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-be… |
vulnerability |
nvd |
CVE-2026-113671 |
|
2026-10-20 |
| medium |
CVE-2026-113670 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page RE… |
vulnerability |
nvd |
CVE-2026-113670 |
|
2026-10-20 |
| high |
CVE-2026-113669 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS… |
vulnerability |
nvd |
CVE-2026-113669, CVE-2026-113711 |
|
2026-10-20 |
| medium |
CVE-2026-113668 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route G… |
vulnerability |
nvd |
CVE-2026-113668 |
|
2026-10-20 |
| unknown |
CVE-2026-113667 — ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on… |
vulnerability |
nvd |
CVE-2026-113667 |
|
2026-10-20 |
| high |
CVE-2026-113666 — ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and… |
vulnerability |
nvd |
CVE-2026-113666 |
|
2026-10-20 |
| low |
CVE-2026-113665 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the notification… |
vulnerability |
nvd |
CVE-2026-113665 |
|
2026-10-20 |
| medium |
CVE-2026-113662 — ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-expo… |
vulnerability |
nvd |
CVE-2026-113662, CVE-2026-113664 |
|
2026-10-20 |
| medium |
CVE-2026-113660 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, ApostropheCMS’s… |
vulnerability |
nvd |
CVE-2026-113660 |
|
2026-10-20 |
| medium |
CVE-2026-113659 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticat… |
vulnerability |
nvd |
CVE-2026-113659 |
|
2026-10-20 |
| medium |
CVE-2026-113507 — A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp… |
vulnerability |
nvd |
CVE-2026-113507 |
|
2026-10-20 |
| critical |
CVE-2026-113506 — A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShe… |
vulnerability |
nvd |
CVE-2026-113506 |
rce |
2026-10-20 |
| medium |
CVE-2026-112861 — Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Databa… |
vulnerability |
nvd |
CVE-2026-112861 |
|
2026-10-20 |
| unknown |
CVE-2026-105772 — Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0… |
vulnerability |
nvd |
CVE-2026-105772 |
|
2026-10-20 |
| unknown |
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign |
news |
general-news |
|
|
2026-10-20 |
| medium |
CVE-2026-92539 — A service account with user-management permissions in one organization can read, modify, disable or… |
vulnerability |
nvd |
CVE-2026-92539 |
|
2026-10-20 |
| medium |
CVE-2026-28331 — SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be use… |
vulnerability |
nvd |
CVE-2026-28331 |
|
2026-10-20 |
| medium |
CVE-2026-28330 — SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS)… |
vulnerability |
nvd |
CVE-2026-28330 |
ransomware |
2026-10-20 |