Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116266 | not reported | — | No | MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous. Th... | 2026-10-29 |
| CVE-2026-116265 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations. The bou... | 2026-10-29 |
| CVE-2026-116264 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the... | 2026-10-29 |
| CVE-2026-116135 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them. The decod... | 2026-10-29 |
| CVE-2026-116134 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The multipart parser take... | 2026-10-29 |
| CVE-2026-116133 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed bo... | 2026-10-29 |
| CVE-2026-116132 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser create... | 2026-10-29 |
| CVE-2026-116131 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart... | 2026-10-29 |
| CVE-2026-118255 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.href to the credits lin... | 2026-10-29 |
| CVE-2026-118254 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into... | 2026-10-29 |
| CVE-2026-118251 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the win... | 2026-10-29 |
| CVE-2026-118250 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated se... | 2026-10-29 |
| CVE-2026-118247 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcha... | 2026-10-29 |
| CVE-2026-118246 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.st... | 2026-10-29 |
| CVE-2026-118243 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and st... | 2026-10-29 |
| CVE-2026-118242 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from renderin... | 2026-10-29 |
| CVE-2026-116797 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.rend... | 2026-10-29 |
| CVE-2026-50543 | medium | 4.3 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-10-29 |
| CVE-2026-50542 | medium | 5.4 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-10-29 |
| CVE-2026-50539 | medium | 6.5 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-10-29 |