CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- No product listedSQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote...9.8 Critical
- No product listedThe Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass...7.5 High
- microsoft .net 10.0 installed on linux, .net 10.0 installed on mac os, .net 10.0 installed on windows +11 more +13 moreASP.NET Core Elevation of Privilege Vulnerability7.8 High
- No product listedNexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.9.8 Critical
- No product listedAn issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to...7.8 High
- No product listedAn issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to...7.8 High
openjpegUbuntu,blenderUbuntu,ghostscriptUbuntu +4 more +6 moreOpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds...6.5 Medium- No product listedAn issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0...7.8 High
- No product listedHomestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated...7.1 High
- No product listedqiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an...5.4 Medium
libosmo-sigtranDebianlibosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src...7.5 HighlibosmocoreDebianlibosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm...7.5 HighlibosmocoreDebianlibosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service...7.5 HighlibosmocoreDebianlibosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in...7.5 Highosmo-mscDebianosmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc...7.5 HighlibosmocoreDebianlibosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in...6.5 MediumlibosmocoreDebianlibosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src...7.5 High- fusion creators studio scp containment breach multiplayer, fcs-ex scp\ +1 moreFusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write5.3 Medium
- steelraven7 ravenfieldSteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization5.3 Medium
- mathurvishal cloudclassroom-php-projectCloudClassroom-PHP-Project addnewstudent.php cross site scripting5.3 Medium
- ggml-org llama.cppggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write4.8 Medium
- smg-project smgsmg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation6.9 Medium
- No product listedEyouCMS function.php remote_file_to_local server-side request forgery6.9 Medium
- ash-project ash postgresAshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows6.0 Medium
- ash-project ash postgresAshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set6.0 Medium
- ash-project ashLoading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records6.0 Medium
- No product listedDedeCMS update_guide.php require_once code injection5.1 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System save_profile.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System edit_dealer.php sql injection6.9 Medium
libplack-perlDebian,perl-PlackopenSUSE +1 moreHTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length7.5 HighstarmanDebian,perl-StarmanopenSUSE +1 moreStarman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies7.5 HighstarmanDebian,perl-StarmanopenSUSE +1 moreStarman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections9.1 CriticalstarmanDebian,perl-StarmanopenSUSE +1 moreStarman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies7.5 HighstarmanDebian,perl-StarmanopenSUSE +1 moreStarman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers7.5 High- sourcecodester performance indicator systemSourceCodester Performance Indicator System adddealer.php sql injection6.9 Medium
- alfresco activitiAlfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection5.3 Medium
w-mousekeynpmWithdrawn Advisory: Malware in w-mousekeyNo score- collabora kodexplorerKodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload5.3 Medium
- collabora kodexplorerKodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery5.3 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System deleteproduct.php sql injection5.3 Medium
- No product listedSH3 Módulo de Gestão/Módulo de Arrecadação weak password hash2.1 Low
cosignSUSESecurity update for cosignNo score- dbcli myclidbcli mycli Whitelist source.py source_special_command_is_safe os command injection4.8 Medium
- openremote coreOpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId2.3 Low
- openremote coreOpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos5.3 Medium
- openremote coreOpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket2.1 Low
- yeswikiYesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create8.8 High
- yeswikiYesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts7.2 High
- yeswikiYesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API8.8 High
- yeswikiYesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax5.3 Medium
- Show moreLoading…