Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110898 | medium | 6.4 | No | Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privil... | 2026-10-19 |
| CVE-2026-110887 | critical | 9.9 | No | Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This i... | 2026-10-19 |
| CVE-2026-102608 | critical | 9.0 | No | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor... | 2026-10-19 |
| CVE-2025-10662 | critical | 9.8 | No | A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave.... | 2026-10-19 |
| CVE-2025-58748 | critical | 9.8 | No | Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation (... | 2026-10-19 |
| CVE-2025-58046 | critical | 9.8 | No | Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vuln... | 2026-10-19 |
| CVE-2025-58045 | critical | 9.8 | No | Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to mitigate D... | 2026-10-19 |
| CVE-2025-10251 | critical | 9.8 | No | A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images... | 2026-10-19 |
| CVE-2025-58750 | critical | 9.1 | No | rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b ar... | 2026-10-19 |
| CVE-2025-58448 | critical | 9.8 | No | rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 ha... | 2026-10-19 |
| CVE-2025-57807 | critical | 9.8 | No | ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 includ... | 2026-10-19 |
| CVE-2025-9775 | critical | 9.8 | No | A vulnerability was found in RemoteClinic up to 2.0. Impacted is an unknown function of the file /staff/edit-my-profile.php. The manipulatio... | 2026-10-19 |
| CVE-2025-9772 | critical | 9.8 | No | A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Performing manipulation of... | 2026-10-19 |
| CVE-2025-58068 | critical | 9.1 | No | Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smug... | 2026-10-19 |
| CVE-2026-100790 | high | 8.8 | No | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15... | 2026-10-19 |
| CVE-2026-46471 | medium | 5.5 | No | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid funct... | 2026-10-19 |
| CVE-2026-112001 | high | 7.2 | No | ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the toke... | 2026-10-19 |
| CVE-2026-111942 | medium | 4.3 | No | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. Thi... | 2026-10-19 |
| CVE-2026-111874 | low | 3.7 | No | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component C... | 2026-10-19 |
| CVE-2026-111870 | medium | 5.3 | No | A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected... | 2026-10-19 |