Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113381 | high | 7.3 | No | A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-inc... | 2026-10-20 |
| CVE-2026-113378 | medium | 5.3 | No | A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the com... | 2026-10-20 |
| CVE-2026-111844 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.Th... | 2026-10-20 |
| CVE-2026-93878 | medium | 6.4 | No | The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to... | 2026-10-20 |
| CVE-2026-93300 | high | 7.5 | No | The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and in... | 2026-10-20 |
| CVE-2026-112373 | medium | 6.5 | No | A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist... | 2026-10-20 |
| CVE-2026-112372 | medium | 6.6 | No | A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulatio... | 2026-10-20 |
| CVE-2026-112371 | critical | 9.9 | No | A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Int... | 2026-10-20 |
| CVE-2026-112360 | high | 8.0 | No | A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/d... | 2026-10-20 |
| CVE-2026-112358 | medium | 4.1 | No | A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function g... | 2026-10-20 |
| CVE-2026-112301 | high | 7.3 | No | A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the fil... | 2026-10-20 |
| CVE-2026-112300 | medium | 5.3 | No | A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file co... | 2026-10-20 |
| CVE-2026-112299 | medium | 4.3 | No | A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of th... | 2026-10-20 |
| CVE-2026-102477 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable pe... | 2026-10-20 |
| CVE-2026-103223 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-... | 2026-10-20 |
| CVE-2026-103224 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inboun... | 2026-10-20 |
| CVE-2026-106147 | medium | 5.4 | No | In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bou... | 2026-10-20 |
| CVE-2026-106148 | medium | 5.4 | No | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert data source imageUrl values into... | 2026-10-20 |
| CVE-2026-106157 | medium | 4.7 | No | In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar component inserts data source ite... | 2026-10-20 |
| CVE-2026-106158 | medium | 4.7 | No | In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda views insert resource color va... | 2026-10-20 |