Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104077 | high | 7.8 | No | Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploi... | 2026-10-12 |
| CVE-2025-71338 | critical | 9.8 | No | Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write fil... | 2026-10-12 |
| CVE-2025-71333 | critical | 9.8 | No | Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType i... | 2026-10-12 |
| CVE-2026-95166 | medium | 5.4 | No | In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload. | 2026-10-12 |
| CVE-2026-95165 | medium | 6.1 | No | Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field. | 2026-10-12 |
| CVE-2026-81774 | high | 7.5 | No | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-prod... | 2026-10-12 |
| CVE-2026-106445 | not reported | — | No | Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Fu... | 2026-10-12 |
| CVE-2026-105059 | medium | 6.5 | No | Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorr... | 2026-10-12 |
| CVE-2025-61605 | critical | 9.8 | No | WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerabilit... | 2026-10-12 |
| CVE-2025-61603 | critical | 9.8 | No | WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in... | 2026-10-12 |
| CVE-2025-59743 | critical | 9.8 | No | SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete da... | 2026-10-12 |
| CVE-2025-59742 | critical | 9.8 | No | SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete da... | 2026-10-12 |
| CVE-2025-59741 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59740 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59739 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59738 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59737 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59736 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59735 | critical | 9.8 | No | Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating syste... | 2026-10-12 |
| CVE-2025-59951 | critical | 9.1 | No | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The official Docker image for... | 2026-10-12 |