Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82741 | not reported | — | No | Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.... | 2026-09-01 |
| CVE-2026-82740 | not reported | — | No | Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested {:array, {:array,... | 2026-09-01 |
| CVE-2026-82739 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed fiel... | 2026-09-01 |
| CVE-2026-82738 | not reported | — | No | Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-versio... | 2026-09-01 |
| CVE-2026-82737 | not reported | — | No | Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by subm... | 2026-09-01 |
| CVE-2026-82736 | not reported | — | No | Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string val... | 2026-09-01 |
| CVE-2026-82735 | not reported | — | No | Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expression to run on inp... | 2026-09-01 |
| CVE-2026-82734 | not reported | — | No | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value... | 2026-09-01 |
| CVE-2026-82733 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker... | 2026-09-01 |
| CVE-2026-82732 | not reported | — | No | Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values outside a declared... | 2026-09-01 |
| CVE-2026-82731 | not reported | — | No | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who controls a path-param... | 2026-09-01 |
| CVE-2026-82730 | not reported | — | No | Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute values that Ash fiel... | 2026-09-01 |
| CVE-2026-77950 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker... | 2026-09-01 |
| CVE-2026-77856 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhau... | 2026-09-01 |
| CVE-2026-74837 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhau... | 2026-09-01 |
| CVE-2026-18931 | critical | 9.1 | No | Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retri... | 2026-09-01 |
| CVE-2026-18780 | high | 7.1 | No | Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows C... | 2026-09-01 |
| CVE-2026-18771 | high | 7.5 | No | Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Softwa... | 2026-09-01 |
| CVE-2026-18630 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co... | 2026-09-01 |
| CVE-2026-84232 | medium | 5.4 | No | A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original con... | 2026-09-01 |