Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2020-15801 | critical | 9.8 | No | In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. T... | 2026-10-14 |
| CVE-2020-11656 | critical | 9.8 | No | In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compo... | 2026-10-14 |
| CVE-2019-1010022 | critical | 9.8 | No | GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The a... | 2026-10-14 |
| CVE-2025-58443 | critical | 9.1 | No | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication... | 2026-10-14 |
| CVE-2019-20367 | critical | 9.1 | No | nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab). | 2026-10-14 |
| CVE-2019-19646 | critical | 9.8 | No | pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. | 2026-10-14 |
| CVE-2019-19317 | critical | 9.8 | No | lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to ca... | 2026-10-14 |
| CVE-2019-9948 | critical | 9.1 | No | urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechani... | 2026-10-14 |
| CVE-2019-9636 | critical | 9.8 | No | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NF... | 2026-10-14 |
| CVE-2019-8457 | critical | 9.8 | No | SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree t... | 2026-10-14 |
| CVE-2019-9169 | critical | 9.8 | No | In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attemp... | 2026-10-14 |
| CVE-2019-5482 | critical | 9.8 | No | Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. | 2026-10-14 |
| CVE-2019-5481 | critical | 9.8 | No | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. | 2026-10-14 |
| CVE-2019-3862 | critical | 9.1 | No | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and... | 2026-10-14 |
| CVE-2019-3861 | critical | 9.1 | No | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet... | 2026-10-14 |
| CVE-2019-3860 | critical | 9.1 | No | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker... | 2026-10-14 |
| CVE-2019-3858 | critical | 9.1 | No | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote... | 2026-10-14 |
| CVE-2019-3859 | critical | 9.1 | No | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A r... | 2026-10-14 |
| CVE-2019-18224 | critical | 9.8 | No | idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. | 2026-10-14 |
| CVE-2019-12900 | critical | 9.8 | No | BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. | 2026-10-14 |