Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-75818 | not reported | — | No | GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not pr... | 2026-10-06 |
| CVE-2026-95105 | not reported | — | No | Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows a... | 2026-10-06 |
| CVE-2026-94206 | not reported | — | No | Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an... | 2026-10-06 |
| CVE-2026-85153 | not reported | — | No | This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An u... | 2026-10-06 |
| CVE-2026-104380 | medium | 5.3 | No | Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one. On H... | 2026-10-06 |
| CVE-2026-82989 | critical | 9.8 | No | There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to injec... | 2026-10-06 |
| CVE-2026-82988 | high | 7.5 | No | There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated atta... | 2026-10-06 |
| CVE-2026-94201 | not reported | — | No | Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison... | 2026-10-06 |
| CVE-2026-105766 | low | 3.1 | No | Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b... | 2026-10-06 |
| CVE-2026-105682 | low | 2.7 | No | Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to... | 2026-10-06 |
| CVE-2026-105679 | high | 7.3 | No | Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to pr... | 2026-10-06 |
| CVE-2026-105677 | high | 7.2 | No | Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed a... | 2026-10-06 |
| CVE-2026-105652 | low | 3.1 | No | Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of o... | 2026-10-06 |
| CVE-2026-105650 | high | 8.1 | No | Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in u... | 2026-10-06 |
| CVE-2026-105647 | medium | 4.0 | No | Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions,... | 2026-10-06 |
| CVE-2026-105645 | medium | 4.9 | No | Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessiv... | 2026-10-06 |
| CVE-2026-105642 | high | 8.8 | No | Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerabi... | 2026-10-06 |
| CVE-2026-63277 | not reported | — | No | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java datab... | 2026-10-06 |
| CVE-2026-63270 | not reported | — | No | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated... | 2026-10-06 |
| CVE-2026-63269 | not reported | — | No | LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HL... | 2026-10-06 |