https://vulnogram.org/ Most recent CVEs assigned by MITRE Corporation (mitre). https://vulnogram.org/seaview/icons/mitre.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-93856 https://vulnogram.org/CVE-2026-93856 In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired us… Medium Wed, 21 Oct 2026 05:36:39 GMT https://vulnogram.org/CVE-2026-71195 https://vulnogram.org/CVE-2026-71195 In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share witho… Critical Wed, 21 Oct 2026 05:31:56 GMT https://vulnogram.org/CVE-2026-113386 https://vulnogram.org/CVE-2026-113386 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequences injected into the _uid parameter of the mail/headers and mail/viewsource actions to exe… High Tue, 20 Oct 2026 04:53:46 GMT https://vulnogram.org/CVE-2026-113380 https://vulnogram.org/CVE-2026-113380 In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down. Critical Network Exploitable Tue, 20 Oct 2026 04:25:10 GMT https://vulnogram.org/CVE-2026-95168 https://vulnogram.org/CVE-2026-95168 An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py Tue, 20 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-60496 https://vulnogram.org/CVE-2025-60496 A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. Tue, 20 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-60494 https://vulnogram.org/CVE-2025-60494 A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file. Tue, 20 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-60475 https://vulnogram.org/CVE-2025-60475 A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Tue, 20 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-38671 https://vulnogram.org/CVE-2026-38671 Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior (no fixed version available) allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/regi… Medium Network Exploitable Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-107084 https://vulnogram.org/CVE-2026-107084 Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no… Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-107083 https://vulnogram.org/CVE-2026-107083 SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID. Critical Network Exploitable Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-107082 https://vulnogram.org/CVE-2026-107082 Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape_string() is applied but the va… High Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-107081 https://vulnogram.org/CVE-2026-107081 SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) B… Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-60482 https://vulnogram.org/CVE-2025-60482 A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file. Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-60480 https://vulnogram.org/CVE-2025-60480 A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file. Medium Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-55667 https://vulnogram.org/CVE-2025-55667 A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. Medium Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-55654 https://vulnogram.org/CVE-2025-55654 A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file. Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-52290 https://vulnogram.org/CVE-2025-52290 A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file. High Network Exploitable Mon, 19 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-112112 https://vulnogram.org/CVE-2026-112112 An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validatio… Low Sun, 18 Oct 2026 23:01:05 GMT https://vulnogram.org/CVE-2026-112111 https://vulnogram.org/CVE-2026-112111 The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits the id attribute value into an unquoted HTML attr… Medium Sun, 18 Oct 2026 22:39:46 GMT https://vulnogram.org/CVE-2026-111997 https://vulnogram.org/CVE-2026-111997 ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor. Medium Network Exploitable Sun, 18 Oct 2026 00:07:21 GMT https://vulnogram.org/CVE-2026-111855 https://vulnogram.org/CVE-2026-111855 An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrar… High Network Exploitable Sat, 17 Oct 2026 02:09:21 GMT https://vulnogram.org/CVE-2026-111854 https://vulnogram.org/CVE-2026-111854 An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation o… High Sat, 17 Oct 2026 02:08:50 GMT https://vulnogram.org/CVE-2026-111853 https://vulnogram.org/CVE-2026-111853 An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to ex… High Sat, 17 Oct 2026 02:08:13 GMT https://vulnogram.org/CVE-2026-111823 https://vulnogram.org/CVE-2026-111823 Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider. Critical Network Exploitable Fri, 16 Oct 2026 23:16:29 GMT https://vulnogram.org/CVE-2026-111793 https://vulnogram.org/CVE-2026-111793 Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail… Medium Fri, 16 Oct 2026 18:28:10 GMT https://vulnogram.org/CVE-2026-111451 https://vulnogram.org/CVE-2026-111451 Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Pack… High Fri, 16 Oct 2026 03:52:27 GMT https://vulnogram.org/CVE-2026-111450 https://vulnogram.org/CVE-2026-111450 Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attack… Medium Network Exploitable Fri, 16 Oct 2026 03:49:20 GMT https://vulnogram.org/CVE-2026-111449 https://vulnogram.org/CVE-2026-111449 Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorize… Medium Network Exploitable Fri, 16 Oct 2026 03:44:11 GMT https://vulnogram.org/CVE-2026-111448 https://vulnogram.org/CVE-2026-111448 Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths thro… Low Network Exploitable Fri, 16 Oct 2026 03:41:58 GMT https://vulnogram.org/CVE-2026-111447 https://vulnogram.org/CVE-2026-111447 Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent can update and reassign another parent's hasMany… High Fri, 16 Oct 2026 03:39:51 GMT https://vulnogram.org/CVE-2026-111446 https://vulnogram.org/CVE-2026-111446 Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development. Before 4.1.2 these tools have no local-access restriction; in 4.1.2 the restrict… High Network Exploitable Fri, 16 Oct 2026 03:37:32 GMT https://vulnogram.org/CVE-2026-111445 https://vulnogram.org/CVE-2026-111445 Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of thro… High Fri, 16 Oct 2026 03:35:00 GMT https://vulnogram.org/CVE-2026-111444 https://vulnogram.org/CVE-2026-111444 Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists,… Critical Network Exploitable Fri, 16 Oct 2026 03:31:30 GMT https://vulnogram.org/CVE-2026-111443 https://vulnogram.org/CVE-2026-111443 Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELS_TEST_CONTEXT cookie with any value, or including a te… Medium Network Exploitable Fri, 16 Oct 2026 03:28:28 GMT https://vulnogram.org/CVE-2026-111442 https://vulnogram.org/CVE-2026-111442 Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images can contain clickable links or executable scripting. By uploading a craf… Medium Fri, 16 Oct 2026 03:09:43 GMT https://vulnogram.org/CVE-2026-95183 https://vulnogram.org/CVE-2026-95183 An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content. High Network Exploitable Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-95182 https://vulnogram.org/CVE-2026-95182 An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content. Critical Network Exploitable Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-88755 https://vulnogram.org/CVE-2026-88755 Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository. High Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-46472 https://vulnogram.org/CVE-2026-46472 An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially leading to information disclosure. High Network Exploitable Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-46471 https://vulnogram.org/CVE-2026-46471 An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents. Medium Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-26846 https://vulnogram.org/CVE-2026-26846 Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component Critical Network Exploitable Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-106705 https://vulnogram.org/CVE-2026-106705 ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the… High Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-66969 https://vulnogram.org/CVE-2025-66969 Integer overflow in OpenModSim (<=1.11.0), leading to denial of service High Network Exploitable Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-55653 https://vulnogram.org/CVE-2025-55653 GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Processing a crafted MP4 file containing a zero-denominator fraction string causes gf_parse_lfrac() to divide by zero, terminating t… Medium Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-55640 https://vulnogram.org/CVE-2025-55640 A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2025-52097 https://vulnogram.org/CVE-2025-52097 Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding Fri, 16 Oct 2026 00:00:00 GMT https://vulnogram.org/CVE-2026-111357 https://vulnogram.org/CVE-2026-111357 Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026. High Thu, 15 Oct 2026 20:56:58 GMT https://vulnogram.org/CVE-2026-93484 https://vulnogram.org/CVE-2026-93484 Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL comman… High Thu, 15 Oct 2026 03:50:36 GMT https://vulnogram.org/CVE-2026-93483 https://vulnogram.org/CVE-2026-93483 In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an at… Critical Network Exploitable Thu, 15 Oct 2026 03:43:10 GMT