Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-114252 | medium | 6.3 | No | A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is... | 2026-10-27 |
| CVE-2026-114387 | high | 8.8 | No | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard t... | 2026-10-27 |
| CVE-2026-112155 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111563 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111479 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111467 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-113786 | not reported | — | No | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the... | 2026-10-27 |
| CVE-2026-114249 | high | 7.3 | No | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913... | 2026-10-27 |
| CVE-2026-114242 | high | 7.3 | No | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a49... | 2026-10-27 |
| CVE-2025-12534 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2024-58379 | medium | 5.3 | No | nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set... | 2026-10-27 |
| CVE-2024-58378 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-10-27 |
| CVE-2024-58377 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-10-27 |
| CVE-2024-53326 | high | 7.3 | No | LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code e... | 2026-10-27 |
| CVE-2024-51092 | critical | 9.1 | No | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(),... | 2026-10-27 |
| CVE-2024-46508 | high | 7.5 | No | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY... | 2026-10-27 |
| CVE-2024-58335 | medium | 5.0 | No | OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualiz... | 2026-10-27 |
| CVE-2024-50571 | high | 7.2 | No | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7... | 2026-10-27 |
| CVE-2024-47569 | medium | 4.3 | No | A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6,... | 2026-10-27 |
| CVE-2024-21970 | medium | 4.4 | No | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti... | 2026-10-27 |