CyberStack

NIST

CVE intelligence

Cached from NVD. 2026-11-03 18:43 Perth time (AWST). Recent.

1765KEV listed
205Published, last 14 days
663Critical
998High
CVETitleVendorPublishedCVSSKEV listed
CVE-2026-112071The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it—2026-10-20—
CVE-2026-112070The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user —2026-10-20—
CVE-2026-112069The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were —2026-10-20—
CVE-2026-112068The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore ope—2026-10-20—
CVE-2026-112067The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image c—2026-10-20—
CVE-2026-112066The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to t—2026-10-20—
CVE-2026-112065The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the reques—2026-10-20—
CVE-2026-112064The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a databa—2026-10-20—
CVE-2026-111844Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.Th—2026-10-20—
CVE-2026-111090A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessa—2026-10-20—
CVE-2026-110725fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4—2026-10-20—
CVE-2026-110306fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4—2026-10-20—
CVE-2026-110180fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8—2026-10-20—
CVE-2026-110095fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4—2026-10-20—
CVE-2026-109831UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-se—2026-10-20—
CVE-2026-109444OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without co—2026-10-20—
CVE-2026-109443JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via—2026-10-20—
CVE-2026-109442piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stre—2026-10-20—
CVE-2026-109441LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared def—2026-10-20—
CVE-2026-109440LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or P—2026-10-20—
CVE-2026-109395Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fa—2026-10-20—
CVE-2026-109126IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain el—2026-10-20—
CVE-2026-108089** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. A—2026-10-20—
CVE-2026-108088** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a mult—2026-10-20—
CVE-2026-108087** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache—2026-10-20—
CVE-2026-108086** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache—2026-10-20—
CVE-2026-108062Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the wh—2026-10-20—
CVE-2026-107597PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the—2026-10-20—
CVE-2026-107400IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper a—2026-10-20—
CVE-2026-107366IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bu—2026-10-20—
CVE-2026-105949Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint —2026-10-20—
CVE-2026-105941The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation,—2026-10-20—
CVE-2026-105453IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privi—2026-10-20—
CVE-2026-105312A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container imag—2026-10-20—
CVE-2026-105311The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set s—2026-10-20—
CVE-2026-105299Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wr—2026-10-20—
CVE-2026-105298Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters—2026-10-20—
CVE-2026-105297Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded h—2026-10-20—
CVE-2026-103119Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between—2026-10-20—
CVE-2026-102438An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges —2026-10-20—

Previous161–200 of 205Next