Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-116104 — Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate cod…

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of…

neural_network_libraries | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116103 — Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code …

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the compone…

neural_network_libraries | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116102 — QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument pr…

docker-mcp | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
6.5 MEDIUM
CVE-2026-116101 — itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in s…

online_cake_ordering_system | Remote | Injection
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
3.3 LOW
CVE-2026-116100 — gougucms User Level Level.php add cross site scripting

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument…

gougucms | Remote | Cross-Site Scripting
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116099 — Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzB…

A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manip…

scp_containment_breach_multiplayer | Remote | Memory Corruption
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
7.5 HIGH
CVE-2026-116098 — SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserializ…

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a…

ravenfield | Remote | Misconfiguration
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
5.0 MEDIUM
CVE-2026-116097 — CloudClassroom-PHP-Project addnewstudent.php cross site scripting

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname leads to cross site scrip…

cloudclassroom-php-project | Remote | Cross-Site Scripting
Oct 26, 2026 Oct 26, 2026
Oct 26, 2026
Oct 26, 2026
5.3 MEDIUM
CVE-2026-116096 — ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds …

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. Th…

llama.cpp | Memory Corruption
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
5.5 MEDIUM
CVE-2026-116095 — smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::decode_jpeg_rgb of the file crates/multimodal/src/jpeg_turbo.rs of the componen…

smg | Remote | Memory Corruption
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
7.5 HIGH
CVE-2026-116094 — EyouCMS function.php remote_file_to_local server-side request forgery

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to server-side request fo…

eyoucms | Remote | Server-Side Request Forgery
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
6.0 MEDIUM
CVE-2026-115635 — AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upse…

Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulk_create/4 or a single create runs as an upsert …

ash_framework ash_postgres | Remote | Authorization
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
6.0 MEDIUM
CVE-2026-115627 — AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many…

Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a many_to_many rel…

ash_framework ash_postgres | Remote | Authorization
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
6.0 MEDIUM
CVE-2026-114214 — Loading a through relationship with a limit of 1 in Ash ignores the through path and retu…

Incorrect Authorization vulnerability in ash-project ash allows a client to read destination records unrelated to the source record through a through relationship. When a has_many relationship decla…

ash ash_framework | Remote | Authorization
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
5.8 MEDIUM
CVE-2026-116063 — DedeCMS update_guide.php require_once code injection

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote…

dedecms | Remote | Injection
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
7.5 HIGH
CVE-2026-116062 — SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the a…

performance_indicator_system | Remote | Injection
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
7.5 HIGH
CVE-2026-116061 — SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument C…

performance_indicator_system | Remote | Injection
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
7.5 HIGH
CVE-2026-116060 — SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contac…

performance_indicator_system | Remote | Injection
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
0.0 NA
CVE-2026-115825 — HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the se…

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread() calls sized by the remainin…

| Denial of Service
Oct 25, 2026 Oct 26, 2026
Oct 25, 2026
Oct 26, 2026
0.0 NA
CVE-2026-115824 — Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering o…

Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder keeps each chunk in memory until the whole chunk and its C…

| Denial of Service
Oct 25, 2026 Oct 25, 2026
Oct 25, 2026
Oct 25, 2026
Showing 20 of 15662 Results