Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2020-6072 | critical | 9.8 | No | An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compresse... | 2026-10-08 |
| CVE-2019-20445 | critical | 9.1 | No | HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Tr... | 2026-10-08 |
| CVE-2019-20444 | critical | 9.1 | No | HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with... | 2026-10-08 |
| CVE-2019-14893 | critical | 9.8 | No | A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserializat... | 2026-10-08 |
| CVE-2019-13962 | critical | 9.8 | No | lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it do... | 2026-10-08 |
| CVE-2018-1115 | critical | 9.1 | No | postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow... | 2026-10-08 |
| CVE-2018-1270 | critical | 9.8 | No | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose... | 2026-10-08 |
| CVE-2017-7525 | critical | 9.8 | No | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthentica... | 2026-10-08 |
| CVE-2017-15095 | critical | 9.8 | No | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user... | 2026-10-08 |
| CVE-2016-9841 | critical | 9.8 | No | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | 2026-10-08 |
| CVE-2017-5645 | critical | 9.8 | No | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another applic... | 2026-10-08 |
| CVE-2016-5018 | critical | 9.1 | No | In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application... | 2026-10-08 |
| CVE-2025-8053 | critical | 9.1 | No | Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Securit... | 2026-10-08 |
| CVE-2025-55086 | critical | 9.8 | No | In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked ind... | 2026-10-08 |
| CVE-2025-11943 | critical | 9.8 | No | A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTT... | 2026-10-08 |
| CVE-2025-11942 | critical | 9.8 | No | A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lea... | 2026-10-08 |
| CVE-2025-62650 | critical | 9.9 | No | The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnost... | 2026-10-08 |
| CVE-2025-11405 | critical | 9.8 | No | A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file... | 2026-10-08 |
| CVE-2025-11404 | critical | 9.8 | No | A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/save... | 2026-10-08 |
| CVE-2025-11403 | critical | 9.8 | No | A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this issue is some unknown functionality of t... | 2026-10-08 |