Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83745 | not reported | — | No | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and... | 2026-10-02 |
| CVE-2026-83663 | not reported | — | No | Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that... | 2026-10-02 |
| CVE-2026-82459 | not reported | — | No | Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects... | 2026-10-02 |
| CVE-2026-82458 | not reported | — | No | Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd,... | 2026-10-02 |
| CVE-2026-80298 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platfor... | 2026-10-02 |
| CVE-2026-59664 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59663 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59662 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59671 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59670 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-59669 | not reported | — | No | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to tric... | 2026-10-02 |
| CVE-2026-18036 | not reported | — | No | In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are d... | 2026-10-02 |
| CVE-2026-17508 | not reported | — | No | In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the un... | 2026-10-02 |
| CVE-2026-104854 | not reported | — | No | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its... | 2026-10-02 |
| CVE-2026-104853 | not reported | — | No | Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-m... | 2026-10-02 |
| CVE-2026-104422 | high | 7.5 | No | The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks... | 2026-10-02 |
| CVE-2026-104418 | high | 7.2 | No | Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusi... | 2026-10-02 |
| CVE-2026-104414 | high | 8.1 | No | Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into p... | 2026-10-02 |
| CVE-2026-104606 | medium | 6.3 | No | A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the... | 2026-10-02 |
| CVE-2026-104411 | high | 7.3 | No | Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading fi... | 2026-10-02 |