CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- No product listedBusiness::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their signature7.5 High
starletDebianStarlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies7.5 HighstarletDebianStarlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection9.1 CriticalstarletDebianStarlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies7.5 HighstarletDebianStarlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory7.5 High- eset spol. s.r.o. endpoint encryption, full disk encryption, eset, spol. s r.o. eset endpoint encryption +1 more +3 moreImproper access control vulnerability in ESET Encryption products for Windows8.5 High
libhttp-parser-xs-perlDebian,perl-HTTP-Parser-XSopenSUSE +1 moreHTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request9.1 Critical- No product listedCallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route7.5 High
- No product listedDateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds7.5 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation...8.0 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of...5.4 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected...4.3 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...7.1 High
- fossbillingFOSSBilling before 0.8.9 Login CSRF via Staff Guest Login API5.1 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF...2.7 Low
- qtNULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt4.3 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...7.2 High
ocipkgcrates.io`ocipkg`: unpacking an OCI archive can write and delete files outside the local image store (path traversal)7.1 Highnix-narcrates.io`nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)7.5 Highorioncrates.ioBLAKE2b produces wrong tag when using `reset()` with a different-length keyNo scoreorioncrates.ioLLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-timeNo score- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...7.2 High
- zakład ubezpieczeń społecznych płatnikUse of Client-Side Authentication in Płatnik8.6 High
- zakład ubezpieczeń społecznych płatnikWeak password encoding in Płatnik7.7 High
- zakład ubezpieczeń społecznych płatnikLack of traffic encryption in Płatnik2.3 Low
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management...7.8 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...7.2 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...8.8 High
- arketeam bdf, protectelmaj +1 moreStored XSS in Protectel5.1 Medium
- arketeam bdf, protectelmaj +1 moreSQL Injection in Protectel8.4 High
- arketeam bdf, protectelmaj +1 moreSQL Injection in Protectel8.4 High
- arketeam bdf, protectelmaj +1 moreIncorrect authorization in Protectel5.1 Medium
- arketeam bdf, protectelmaj +1 moreArbitrary File Upload in Protectel5.3 Medium
- sqliteSQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause6.8 Medium
- sqliteSQLite CLI through 3.54.1 Command Injection via .recover Output8.5 High
- vsftpdvsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking9.1 Critical
- vsftpdvsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases2.3 Low
- prometheusPrometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects6.3 Medium
- plausible analytics, plausible.io plausible analytics +1 morePlausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update5.3 Medium
- plausible analytics, plausible.io plausible analytics +1 morePlausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs6.0 Medium
- phpmyadminphpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name5.1 Medium
- phpmyadminphpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute2.3 Low
- phpmyadminphpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer7.6 High
- opnsense coreOPNsense: Configuration line injection via multiple GUI text fields8.1 High
- opnsense coreOPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields6.0 Medium
- litespeed technologies openlitespeedOpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch8.2 High
- opencartOpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points2.3 Low
- n8n-io n8nn8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node8.2 High
- moodleMoodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems5.3 Medium
- moodleMoodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback5.3 Medium
- Show moreLoading…