Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101381 | medium | 5.4 | No | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vuln... | 2026-10-27 |
| CVE-2016-20101 | high | 8.1 | No | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include r... | 2026-10-27 |
| CVE-2015-20123 | high | 7.5 | No | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to downloa... | 2026-10-27 |
| CVE-2012-20005 | medium | 6.1 | No | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t... | 2026-10-27 |
| CVE-2026-18526 | not reported | — | No | HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) vulnerability in the oEmbed confirmation renderin... | 2026-10-27 |
| CVE-2026-16816 | critical | 9.9 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neut... | 2026-10-27 |
| CVE-2026-16814 | high | 8.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. | 2026-10-27 |
| CVE-2026-16706 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. | 2026-10-27 |
| CVE-2026-16703 | high | 7.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management. | 2026-10-27 |
| CVE-2026-16690 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consum... | 2026-10-27 |
| CVE-2026-16686 | high | 8.2 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authenticatio... | 2026-10-27 |
| CVE-2026-16656 | critical | 9.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication. | 2026-10-27 |
| CVE-2026-15078 | high | 8.1 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper v... | 2026-10-27 |
| CVE-2026-15068 | critical | 9.9 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper... | 2026-10-27 |
| CVE-2026-15065 | critical | 9.1 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of inter... | 2026-10-27 |
| CVE-2026-15061 | high | 8.2 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path t... | 2026-10-27 |
| CVE-2026-14970 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow. | 2026-10-27 |
| CVE-2026-65612 | not reported | — | No | nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or in... | 2026-10-27 |
| CVE-2026-65611 | not reported | — | No | nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted... | 2026-10-27 |
| CVE-2026-65610 | not reported | — | No | nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execu... | 2026-10-27 |