Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57099 | high | 7.5 | No | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-05 |
| CVE-2026-56599 | low | 2.2 | No | HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to expl... | 2026-10-05 |
| CVE-2026-56589 | high | 7.2 | No | HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and... | 2026-10-05 |
| CVE-2026-67106 | medium | 5.3 | No | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data... | 2026-10-05 |
| CVE-2026-67105 | high | 7.4 | No | HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network ac... | 2026-10-05 |
| CVE-2026-67104 | medium | 5.3 | No | HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analy... | 2026-10-05 |
| CVE-2026-94653 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are... | 2026-10-05 |
| CVE-2026-94652 | not reported | — | No | Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.... | 2026-10-05 |
| CVE-2026-96990 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: befo... | 2026-10-05 |
| CVE-2026-94648 | not reported | — | No | Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before... | 2026-10-05 |
| CVE-2026-94638 | not reported | — | No | Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before... | 2026-10-05 |
| CVE-2026-94637 | not reported | — | No | Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings. This issue affects Apache Thri... | 2026-10-05 |
| CVE-2026-94645 | not reported | — | No | Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift node... | 2026-10-05 |
| CVE-2026-94644 | not reported | — | No | Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before... | 2026-10-05 |
| CVE-2026-94642 | not reported | — | No | Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to... | 2026-10-05 |
| CVE-2026-94639 | not reported | — | No | improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apach... | 2026-10-05 |
| CVE-2026-61373 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache... | 2026-10-05 |
| CVE-2026-59661 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-05 |
| CVE-2026-59660 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-05 |
| CVE-2026-59659 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-05 |