Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
10.0 HIGH
CVE-2026-108971 — D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signatur…

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of …

Remote | Cryptography
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108970 — itsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql in…

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file include/database.php…

online-examination-system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108969 — itsmeravitejak Online-Examination-System Session session.php checkLogin comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the …

online-examination-system | Remote | Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108968 — SourceCodester Performance Indicator System sales_history.php sql injection

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the arg…

performance_indicator_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108967 — SourceCodester Performance Indicator System edit_credit.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument cred…

performance_indicator_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108966 — SourceCodester Performance Indicator System product.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Ca…

performance_indicator_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.3 CRITICAL
CVE-2026-109758 — Perforce Helix Authentication Service Hardcoded Credential and Prototype Pollution Vulner…

Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In …

Remote | Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108965 — SourceCodester Performance Indicator System edit_quantity.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the …

performance_indicator_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108964 — SourceCodester Performance Indicator System addproduct.php sql injection

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcateg…

performance_indicator_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108962 — storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file…

A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig._file2dict of the file local_groun…

comfyui_segment_anything | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108961 — PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection

A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference/models/text_detection/processors.py of …

paddlex | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-109786 — Fail2ban sshd filter IP address spoofing vulnerability

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address. Because OpenSSH logs the offered username verbatim,…

fail2ban | Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-108960 — Tiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bo…

A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml…

powerinfer | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108959 — itsourcecode Online Cake Ordering System addtransacdetail.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID lea…

online_cake_ordering_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108958 — TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization

A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of …

tensorlayer | Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108957 — TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config …

A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/c…

tinyllava_factory | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
2.7 LOW
CVE-2026-9268 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
10.0 CRITICAL
CVE-2026-97229 — Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthe…

gitlab | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-96893 — Improper Neutralization of Input Used for LLM Prompting in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.7 HIGH
CVE-2026-92883 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in G…

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authen…

gitlab | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 14367 Results