| CVE-2026-118575 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal S… | 2026-10-30 |
| CVE-2026-118576 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal S… | 2026-10-30 |
| CVE-2026-118582 | NA | N/A | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality … | 2026-10-30 |
| CVE-2026-118583 | NA | N/A | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects… | 2026-10-30 |
| CVE-2026-118584 | NA | N/A | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects… | 2026-10-30 |
| CVE-2026-96389 | NA | N/A | Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Aud… | 2026-10-30 |
| CVE-2026-103963 | HIGH | 7.5 | A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) versio… | 2026-10-30 |
| CVE-2026-104368 | HIGH | 8.8 | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all ve… | 2026-10-30 |
| CVE-2026-5461 | MEDIUM | 6.5 | The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and in… | 2026-10-30 |
| CVE-2026-114422 | NA | N/A | The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializin… | 2026-10-30 |
| CVE-2026-114443 | NA | N/A | The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verif… | 2026-10-30 |
| CVE-2026-114444 | NA | N/A | The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restr… | 2026-10-30 |
| CVE-2026-115277 | NA | N/A | The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values befor… | 2026-10-30 |
| CVE-2026-117571 | NA | N/A | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape trackin… | 2026-10-30 |
| CVE-2026-117572 | NA | N/A | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a param… | 2026-10-30 |
| CVE-2026-118071 | NA | N/A | The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting … | 2026-10-30 |
| CVE-2026-118072 | NA | N/A | The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allow… | 2026-10-30 |
| CVE-2026-118100 | NA | N/A | The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form be… | 2026-10-30 |
| CVE-2026-118101 | NA | N/A | The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the aut… | 2026-10-30 |
| CVE-2026-118165 | NA | N/A | The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic… | 2026-10-30 |
| CVE-2026-118194 | MEDIUM | 6.5 | The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up t… | 2026-10-30 |
| CVE-2026-118500 | MEDIUM | 6.4 | The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-B… | 2026-10-30 |
| CVE-2026-118634 | MEDIUM | 6.4 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' paramet… | 2026-10-30 |
| CVE-2026-118698 | MEDIUM | 6.5 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to gener… | 2026-10-30 |
| CVE-2026-119059 | MEDIUM | 4.3 | The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-p… | 2026-10-30 |
| CVE-2026-119087 | MEDIUM | 4.3 | The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authoriz… | 2026-10-30 |
| CVE-2026-103039 | CRITICAL | 9.8 | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includ… | 2026-10-30 |
| CVE-2026-110732 | HIGH | 7.5 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Au… | 2026-10-30 |
| CVE-2026-116622 | HIGH | 7.2 | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripti… | 2026-10-30 |
| CVE-2026-118593 | MEDIUM | 5.9 | A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix… | 2026-10-30 |
| CVE-2026-118952 | MEDIUM | 6.5 | A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal… | 2026-10-30 |
| CVE-2026-89435 | HIGH | 8.8 | The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPr… | 2026-10-30 |
| CVE-2026-90437 | HIGH | 7.2 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Cu… | 2026-10-30 |
| CVE-2026-97645 | HIGH | 7.2 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all vers… | 2026-10-30 |
| CVE-2026-114690 | MEDIUM | 6.2 | A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search … | 2026-10-30 |
| CVE-2026-114691 | MEDIUM | 5.9 | A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element c… | 2026-10-30 |
| CVE-2026-115455 | MEDIUM | 6.5 | A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character strea… | 2026-10-30 |
| CVE-2026-82104 | NA | N/A | In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versio… | 2026-10-30 |
| CVE-2026-109821 | NA | N/A | Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module a… | 2026-10-30 |
| CVE-2026-115274 | NA | N/A | Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module … | 2026-10-30 |
| CVE-2026-115456 | LOW | 3.7 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not nul… | 2026-10-30 |
| CVE-2026-59385 | LOW | 2.7 | A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its crede… | 2026-10-30 |
| CVE-2026-59386 | MEDIUM | 6.5 | A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceD… | 2026-10-30 |
| CVE-2026-59387 | HIGH | 8.8 | The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /inter… | 2026-10-30 |
| CVE-2026-59388 | MEDIUM | 6.5 | Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentia… | 2026-10-30 |
| CVE-2026-59396 | MEDIUM | 4.9 | A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA re… | 2026-10-30 |
| CVE-2026-64618 | NA | N/A | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in A… | 2026-10-30 |
| CVE-2026-65874 | NA | N/A | This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/… | 2026-10-30 |
| CVE-2026-97209 | NA | N/A | Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as a… | 2026-10-30 |
| CVE-2026-14467 | NA | N/A | An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain un… | 2026-10-30 |