Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83614 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83613 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83612 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HT... | 2026-09-08 |
| CVE-2026-83611 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83610 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83609 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0 until 0.9.12, the share... | 2026-09-08 |
| CVE-2026-83608 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83607 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83606 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, th... | 2026-09-08 |
| CVE-2026-83605 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-52777 | not reported | — | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport... | 2026-09-08 |
| CVE-2026-52775 | high | 8.8 | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln... | 2026-09-08 |
| CVE-2026-52774 | medium | 6.1 | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr... | 2026-09-08 |
| CVE-2026-52773 | medium | 6.1 | No | YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET... | 2026-09-08 |
| CVE-2026-52771 | high | 8.3 | No | YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a page tag ret... | 2026-09-08 |
| CVE-2026-52770 | high | 7.5 | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated... | 2026-09-08 |
| CVE-2026-52769 | high | 8.3 | No | YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /api/forms/{formId}/actor/inbox route - expose... | 2026-09-08 |
| CVE-2026-52767 | high | 8.2 | No | YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignature() checks the resu... | 2026-09-08 |
| CVE-2026-52763 | medium | 6.5 | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action (actions/recentchanges.php) accepts a period argum... | 2026-09-08 |
| CVE-2026-52762 | not reported | — | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki Bazar contains a stored Server-Side Template Injection (SSTI) vulne... | 2026-09-08 |