Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112279 | medium | 6.5 | No | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers... | 2026-10-19 |
| CVE-2026-112277 | medium | 6.5 | No | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to... | 2026-10-19 |
| CVE-2026-112276 | medium | 6.1 | No | Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying... | 2026-10-19 |
| CVE-2026-112275 | medium | 6.1 | No | Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image i... | 2026-10-19 |
| CVE-2026-112274 | low | 3.7 | No | libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer b... | 2026-10-19 |
| CVE-2026-112272 | medium | 5.5 | No | Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attack... | 2026-10-19 |
| CVE-2026-112271 | medium | 5.5 | No | libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs... | 2026-10-19 |
| CVE-2026-112262 | high | 7.1 | No | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary serv... | 2026-10-19 |
| CVE-2026-111939 | medium | 4.6 | No | Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impers... | 2026-10-19 |
| CVE-2026-111938 | medium | 4.3 | No | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other users' call lo... | 2026-10-19 |
| CVE-2026-111937 | medium | 5.4 | No | Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Not... | 2026-10-19 |
| CVE-2026-111935 | low | 2.6 | No | NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local im... | 2026-10-19 |
| CVE-2026-111925 | medium | 5.3 | No | Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dir... | 2026-10-19 |
| CVE-2026-111915 | medium | 5.9 | No | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the... | 2026-10-19 |
| CVE-2026-111899 | medium | 4.3 | No | KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated household members... | 2026-10-19 |
| CVE-2026-112112 | not reported | — | No | An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matchi... | 2026-10-19 |
| CVE-2026-112111 | not reported | — | No | The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode.... | 2026-10-19 |
| CVE-2026-112063 | medium | 5.9 | No | libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a... | 2026-10-19 |
| CVE-2026-112061 | medium | 4.3 | No | librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element co... | 2026-10-19 |
| CVE-2026-112060 | medium | 6.4 | No | librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 p... | 2026-10-19 |