Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103845 | high | 8.6 | No | Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of t... | 2026-10-14 |
| CVE-2026-103844 | high | 7.8 | No | Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us... | 2026-10-14 |
| CVE-2026-104344 | high | 7.8 | No | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of t... | 2026-10-14 |
| CVE-2026-104343 | medium | 5.5 | No | Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker... | 2026-10-14 |
| CVE-2026-104342 | high | 7.8 | No | Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current u... | 2026-10-14 |
| CVE-2026-104341 | high | 7.8 | No | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cur... | 2026-10-14 |
| CVE-2026-104340 | high | 7.8 | No | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of t... | 2026-10-14 |
| CVE-2026-103967 | high | 7.8 | No | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cur... | 2026-10-14 |
| CVE-2026-103966 | high | 7.8 | No | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of t... | 2026-10-14 |
| CVE-2026-103857 | medium | 5.5 | No | Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could lev... | 2026-10-14 |
| CVE-2026-103856 | medium | 5.5 | No | Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could lev... | 2026-10-14 |
| CVE-2026-52295 | low | 2.9 | No | FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavf... | 2026-10-14 |
| CVE-2026-85424 | critical | 9.8 | No | MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subs... | 2026-10-14 |
| CVE-2026-85431 | high | 7.5 | No | MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured wit... | 2026-10-14 |
| CVE-2026-97398 | high | 7.2 | No | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all v... | 2026-10-14 |
| CVE-2026-95808 | high | 7.5 | No | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the... | 2026-10-14 |
| CVE-2026-87855 | critical | 9.8 | No | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 vi... | 2026-10-14 |
| CVE-2026-16495 | medium | 6.4 | No | The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect_url' Shortcode Attrib... | 2026-10-14 |
| CVE-2026-109963 | medium | 4.3 | No | Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because... | 2026-10-14 |
| CVE-2026-107757 | medium | 4.9 | No | The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profile.php) + comment (wp... | 2026-10-14 |