CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- trusted domain project opendmarcTrusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference6.9 Medium
gimpDebianUpdated gimp packages fix security vulnerabilitiesNo scoregimpDebianUpdated gimp packages fix security vulnerabilitiesNo score- wiresharkHeap-based Buffer Overflow in Wireshark5.5 Medium
- wiresharkReachable Assertion in Wireshark5.5 Medium
- wiresharkImproperly Controlled Sequential Memory Allocation in Wireshark5.5 Medium
- wiresharkBuffer Over-read in Wireshark4.7 Medium
- wiresharkImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark5.5 Medium
- wiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark5.5 Medium
- wiresharkHeap-based Buffer Overflow in Wireshark5.5 Medium
- wiresharkHeap-based Buffer Overflow in Wireshark5.5 Medium
- wiresharkStack-based Buffer Overflow in Wireshark5.5 Medium
- wiresharkMissing Release of Memory after Effective Lifetime in Wireshark5.5 Medium
- wiresharkUnchecked Input for Loop Condition in Wireshark4.7 Medium
- wiresharkHeap-based Buffer Overflow in Wireshark4.7 Medium
- wiresharkBuffer Over-read in Wireshark5.5 Medium
- wiresharkUse After Free in Wireshark5.5 Medium
- wiresharkNULL Pointer Dereference in Wireshark5.5 Medium
- wiresharkHeap-based Buffer Overflow in Wireshark8.1 High
- wiresharkHeap-based Buffer Overflow in Wireshark5.5 Medium
- wiresharkHeap-based Buffer Overflow in Wireshark8.1 High
- wiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark5.5 Medium
- fedora, red hat enterprise linux 10, enterprise linux 9 +2 morexdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape8.7 High
- x.org libxtstOut-of-bounds read in libXtst's RECORD reply parser7.1 High
- the x11 project libx11Out-of-bounds read in libX11's byte-oriented codeset parser5.1 Medium
- the x11 project libx11Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser5.5 Medium
- the x11 project libx11Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser6.5 Medium
- x.org libxiOut-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion5.6 Medium
- trusted domain project opendkimTrusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one6.9 Medium
- trusted domain project opendkimTrusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write6.9 Medium
- amirsanni mini-inventory-and-sales-management-systemamirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection5.3 Medium
- seetong t8108, t8108p, t8116 +1 more +3 moreSeetong T8108/T8108P/T8116/T8232 Debug Service improper authentication10.0 Critical
- krayin laravel-crmKrayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization6.9 Medium
- krayin laravel-crmKrayin laravel-crm attachment-download Endpoint acl.php resource injection5.3 Medium
- krayin laravel-crmKrayin laravel-crm acl.php access control5.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following2.5 Low
- krayin laravel-crmKrayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting4.8 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: extension metadata path traversal file existence oracle3.1 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull3.3 Low
- zhistaredu startrainingzhistaredu StarTraining application.yml cross site scripting2.1 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes6.2 Medium
- zhistaredu startrainingzhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting5.1 Medium
- nezhahq nezhaNezha before 2.2.7 Information Disclosure via /api/v1/profile2.3 Low
- nezhahq nezhaNezha before 2.3.1 Denial of Service via Concurrent Server Delete6.0 Medium
- nezhahq nezhaNezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv65.3 Medium
- nezhahq nezhaNezha Dashboard before 2.3.5 Task Type Validation Bypass7.1 High
- nezhahq nezhaNezha before 2.3.8 Denial of Service via Alert Rule7.1 High
- obot-platform obotObot Quickstart Docker Deployment Unauthenticated Admin Access9.3 Critical
- zhistaredu startrainingzhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization5.3 Medium
- zhistaredu startrainingzhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization5.3 Medium
- Show moreLoading…