CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete5.3 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions7.1 High
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task6.9 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity8.7 High
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event8.7 High
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected7.1 High
- semanticmediawiki, semantic-mediawiki semantic mediawiki +1 moreSemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters5.3 Medium
- semanticmediawiki, semantic-mediawiki semantic mediawiki +1 moreSemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter5.3 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update6.9 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters8.7 High
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask8.7 High
- jetbrains junie cliIn JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation...6.7 Medium
- moxa nport w2150a-w4/w2250a-w4 seriesA stack-based buffer overflow vulnerability exists in the web management interface of affected...5.3 Medium
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreAuthentication Bypass by Spoofing Vulnerability in HiRDB9.8 Critical
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreMissing Authentication for Critical Function Vulnerability in HiRDB9.8 Critical
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreStack-based Buffer Overflow Vulnerability in HiRDB9.8 Critical
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreHeap-based Buffer Overflow Vulnerability in HiRDB9.8 Critical
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreOS Command Injection Vulnerability in HiRDB9.8 Critical
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreOrigin Validation Error Vulnerability in HiRDB7.5 High
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreStack-based Buffer Overflow Vulnerability in HiRDB9.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager +1 moreHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 Critical
- hitachi jp1/automatic job management system 3 - managerStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - managerHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - managerAuthentication Bypass Vulnerability in JP1/Automatic Job Management System 39.8 Critical
- hitachi jp1/automatic job management system 3 - managerStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreOut-of-bounds Write Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreHeap-based Buffer Overflow Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreStack-based Buffer Overflow Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/baseHeap-based Buffer Overflow Vulnerability in JP1/Base9.8 Critical
- alexandregz twofactor gauthenticatorAuthentication bypass by spoofing in twofactor_gauthenticator6.3 Medium
- alexandregz twofactor gauthenticatorInsufficient session expiration in twofactor_gauthenticator6.3 Medium
- alexandregz twofactor gauthenticatorLack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator6.3 Medium
- phoca.cz phoca download extension for joomlaJoomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.55.3 Medium
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.29.3 Critical
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.29.3 Critical
- sisense cloud bi platformMultiple vulnerabilities in Sisense’s Cloud BI Platform8.3 High
- google compute engineMissing Authorization in Compute Engine allows Cross-Project Disk Exfiltration8.3 High
- qode themes membershipQode Membership <= 2.0.6.2 - Authentication Bypass via Social Login9.8 Critical
- smci mbd-x12spiSupermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability6.6 Medium
- smci mbd-x12spiSupermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability7.2 High
- smci mbd-x12spiSupermicro BMC IPMI feature contains Arbitrary File Access vulnerability4.9 Medium
- smci mbd-x12spiSupermicro BMC IPMI feature contains a Privilege escalation vulnerability8.8 High
- smci mbd-x12spiSupermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability7.4 High
@camera.ui/camera-ui-nvr-windows-amd64npmWithdrawn Advisory: Malware in @camera.ui/camera-ui-nvr-windows-amd64No score- smci mbd-x12spiSupermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token3.1 Low
- smci x12spiSupermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability9.8 Critical
- artbees jupiter x coreJupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter6.4 Medium
- Show moreLoading…