Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-64236 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the... | 2026-10-27 |
| CVE-2024-51316 | high | 7.5 | No | The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /goform/SetOnlineDevNa... | 2026-10-27 |
| CVE-2024-51315 | critical | 9.8 | No | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName | 2026-10-27 |
| CVE-2024-51314 | critical | 9.8 | No | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg. | 2026-10-27 |
| CVE-2024-51312 | critical | 9.8 | No | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg. | 2026-10-27 |
| CVE-2024-51313 | critical | 9.8 | No | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg. | 2026-10-27 |
| CVE-2024-51311 | critical | 9.8 | No | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList. | 2026-10-27 |
| CVE-2024-58370 | medium | 6.5 | No | SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and at... | 2026-10-27 |
| CVE-2024-58369 | medium | 6.5 | No | SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing... | 2026-10-27 |
| CVE-2024-58368 | high | 7.5 | No | SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. U... | 2026-10-27 |
| CVE-2024-58367 | medium | 6.5 | No | SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized... | 2026-10-27 |
| CVE-2024-58365 | medium | 6.5 | No | SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built... | 2026-10-27 |
| CVE-2024-58364 | medium | 6.5 | No | SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on l... | 2026-10-27 |
| CVE-2024-58362 | high | 8.8 | No | SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC API w... | 2026-10-27 |
| CVE-2024-58361 | medium | 6.5 | No | SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empt... | 2026-10-27 |
| CVE-2024-58359 | medium | 6.5 | No | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism when using ORDER BY rand() clause. Author... | 2026-10-27 |
| CVE-2024-58358 | medium | 4.9 | No | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define us... | 2026-10-27 |
| CVE-2024-58357 | medium | 6.5 | No | SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called o... | 2026-10-27 |
| CVE-2024-58356 | medium | 6.3 | No | SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined wi... | 2026-10-27 |
| CVE-2024-34268 | high | 7.1 | No | EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth... | 2026-10-27 |