Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110248 | medium | 5.3 | No | Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 bef... | 2026-10-16 |
| CVE-2026-0893 | not reported | — | No | AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by loca... | 2026-10-16 |
| CVE-2025-58774 | not reported | — | No | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful ex... | 2026-10-16 |
| CVE-2025-58773 | not reported | — | No | AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vul... | 2026-10-16 |
| CVE-2025-58772 | not reported | — | No | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of thi... | 2026-10-16 |
| CVE-2026-103658 | medium | 5.9 | No | GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionar... | 2026-10-16 |
| CVE-2026-111413 | high | 8.8 | No | Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery... | 2026-10-16 |
| CVE-2026-111409 | medium | 5.3 | No | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows... | 2026-10-16 |
| CVE-2026-111405 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG ma... | 2026-10-16 |
| CVE-2026-111400 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for... | 2026-10-16 |
| CVE-2026-111399 | high | 8.5 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG ma... | 2026-10-16 |
| CVE-2026-111397 | medium | 5.3 | No | Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sens... | 2026-10-16 |
| CVE-2026-111396 | high | 7.1 | No | Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Conf... | 2026-10-16 |
| CVE-2026-110903 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Cale... | 2026-10-16 |
| CVE-2026-110901 | medium | 5.4 | No | Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo allows Exploiting Incorrectly Configure... | 2026-10-16 |
| CVE-2026-110900 | medium | 5.3 | No | Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security... | 2026-10-16 |
| CVE-2026-110896 | medium | 5.3 | No | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security... | 2026-10-16 |
| CVE-2026-110380 | medium | 5.3 | No | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control... | 2026-10-16 |
| CVE-2026-111472 | not reported | — | No | An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update an... | 2026-10-16 |
| CVE-2026-101300 | not reported | — | No | Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authent... | 2026-10-16 |