Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97716 | not reported | — | No | CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attac... | 2026-10-08 |
| CVE-2026-97715 | not reported | — | No | CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attacker... | 2026-10-08 |
| CVE-2026-97714 | not reported | — | No | CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send... | 2026-10-08 |
| CVE-2026-93858 | not reported | — | No | In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyComma... | 2026-10-08 |
| CVE-2026-107615 | high | 7.8 | No | An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to... | 2026-10-08 |
| CVE-2026-107614 | medium | 6.1 | No | An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenti... | 2026-10-08 |
| CVE-2026-107613 | medium | 5.9 | No | A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an a... | 2026-10-08 |
| CVE-2026-107612 | high | 7.8 | No | Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite... | 2026-10-08 |
| CVE-2026-107611 | high | 7.1 | No | An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromi... | 2026-10-08 |
| CVE-2026-44038 | medium | 4.4 | No | A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK... | 2026-10-08 |
| CVE-2026-44037 | medium | 5.5 | No | Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcm... | 2026-10-08 |
| CVE-2026-44036 | medium | 5.5 | No | Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter... | 2026-10-08 |
| CVE-2026-44035 | medium | 5.5 | No | Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a d... | 2026-10-08 |
| CVE-2026-44034 | medium | 4.4 | No | A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker t... | 2026-10-08 |
| CVE-2026-44033 | medium | 5.5 | No | Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS... | 2026-10-08 |
| CVE-2026-44031 | high | 7.5 | No | Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauth... | 2026-10-08 |
| CVE-2026-92862 | low | 3.3 | No | The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an... | 2026-10-08 |
| CVE-2026-92861 | medium | 4.0 | No | The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the... | 2026-10-08 |
| CVE-2026-62252 | critical | 9.8 | No | Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authenticatio... | 2026-10-08 |
| CVE-2026-62251 | high | 8.1 | No | Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `ra... | 2026-10-08 |