Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-94657 | not reported | — | No | Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: befo... | 2026-10-02 |
| CVE-2026-94656 | not reported | — | No | Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before... | 2026-10-02 |
| CVE-2026-94655 | not reported | — | No | Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This... | 2026-10-02 |
| CVE-2026-94654 | not reported | — | No | Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: be... | 2026-10-02 |
| CVE-2026-95662 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-95817 | high | 7.2 | No | The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and i... | 2026-10-02 |
| CVE-2026-94636 | not reported | — | No | Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of... | 2026-10-02 |
| CVE-2026-94541 | critical | 9.8 | No | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi... | 2026-10-02 |
| CVE-2026-94180 | medium | 4.3 | No | Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This i... | 2026-10-02 |
| CVE-2026-93880 | medium | 6.1 | No | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '{{GET:}}' Dynam... | 2026-10-02 |
| CVE-2026-91775 | not reported | — | No | LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying impor... | 2026-10-02 |
| CVE-2026-85476 | not reported | — | No | Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: be... | 2026-10-02 |
| CVE-2026-85209 | medium | 6.5 | No | Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) a... | 2026-10-02 |
| CVE-2026-87117 | not reported | — | No | NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommend... | 2026-10-02 |
| CVE-2026-86536 | not reported | — | No | Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings. T... | 2026-10-02 |
| CVE-2026-86535 | not reported | — | No | Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollut... | 2026-10-02 |
| CVE-2026-85088 | not reported | — | No | Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access... | 2026-10-02 |
| CVE-2026-85087 | not reported | — | No | Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thri... | 2026-10-02 |
| CVE-2026-85086 | not reported | — | No | Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This i... | 2026-10-02 |
| CVE-2026-91135 | not reported | — | No | Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the fram... | 2026-10-02 |