Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111849 | medium | 5.3 | No | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Contr... | 2026-10-21 |
| CVE-2026-110884 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geekontheroad Live Summary for Gravity... | 2026-10-21 |
| CVE-2026-110370 | high | 8.8 | No | Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issu... | 2026-10-21 |
| CVE-2026-110369 | high | 8.8 | No | Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.Th... | 2026-10-21 |
| CVE-2026-110899 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Stover Ninja Forms ninja-forms a... | 2026-10-21 |
| CVE-2026-107435 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-te... | 2026-10-21 |
| CVE-2026-114040 | low | 3.5 | No | A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta... | 2026-10-21 |
| CVE-2026-113741 | medium | 4.3 | No | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the... | 2026-10-21 |
| CVE-2026-109949 | medium | 6.5 | No | FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementati... | 2026-10-21 |
| CVE-2026-109950 | medium | 4.3 | No | FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sen... | 2026-10-21 |
| CVE-2026-92768 | medium | 5.5 | No | A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM) credentials, inclu... | 2026-10-21 |
| CVE-2026-92747 | medium | 5.0 | No | A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose s... | 2026-10-21 |
| CVE-2026-92745 | medium | 5.0 | No | A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a... | 2026-10-21 |
| CVE-2026-109951 | medium | 5.3 | No | FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC cha... | 2026-10-21 |
| CVE-2026-109952 | medium | 5.3 | No | The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol s... | 2026-10-21 |
| CVE-2026-70093 | high | 7.8 | No | Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83879 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized a... | 2026-10-21 |
| CVE-2026-109953 | medium | 5.3 | No | FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppr... | 2026-10-21 |
| CVE-2026-83881 | high | 7.8 | No | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-70092 | high | 7.8 | No | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 2026-10-21 |