Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100185 | medium | 6.4 | No | The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting... | 2026-10-15 |
| CVE-2025-9373 | medium | 6.4 | No | The PeproDev Branches Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.0.1 due... | 2026-10-15 |
| CVE-2026-84249 | critical | 9.8 | No | IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authen... | 2026-10-15 |
| CVE-2026-84875 | high | 8.8 | No | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | 2026-10-15 |
| CVE-2026-84891 | high | 7.5 | No | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded cre... | 2026-10-15 |
| CVE-2026-87980 | medium | 5.5 | No | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of s... | 2026-10-15 |
| CVE-2026-106435 | medium | 4.7 | No | The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated r... | 2026-10-15 |
| CVE-2026-73593 | medium | 6.7 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileg... | 2026-10-15 |
| CVE-2026-73594 | high | 8.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Val... | 2026-10-15 |
| CVE-2026-73595 | critical | 9.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without... | 2026-10-15 |
| CVE-2026-101287 | not reported | — | No | Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating it... | 2026-10-15 |
| CVE-2026-108072 | not reported | — | No | Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared th... | 2026-10-15 |
| CVE-2026-108071 | not reported | — | No | Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authentica... | 2026-10-15 |
| CVE-2026-108070 | not reported | — | No | A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to a... | 2026-10-15 |
| CVE-2026-14851 | not reported | — | No | A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally ide... | 2026-10-15 |
| CVE-2026-100229 | medium | 6.5 | No | A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI pars... | 2026-10-15 |
| CVE-2026-88829 | high | 7.2 | No | A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backe... | 2026-10-15 |
| CVE-2026-100231 | medium | 6.1 | No | A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode cha... | 2026-10-15 |
| CVE-2026-88838 | medium | 5.5 | No | A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing... | 2026-10-15 |
| CVE-2026-88834 | low | 3.7 | No | A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in ce... | 2026-10-15 |