Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-108964 — SourceCodester Performance Indicator System addproduct.php sql injection

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcateg…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
0.0 NA
CVE-2026-108962 — storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file…

A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig._file2dict of the file local_groun…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-109786 — Fail2ban sshd filter IP address spoofing vulnerability

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address. Because OpenSSH logs the offered username verbatim,…

fail2ban | Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-108960 — Tiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bo…

A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml…

powerinfer | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108959 — itsourcecode Online Cake Ordering System addtransacdetail.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID lea…

online_cake_ordering_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108958 — TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization

A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of …

tensorlayer | Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-108957 — TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config …

A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/c…

tinyllava_factory | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
0.0 NA
CVE-2026-108961 — PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection

A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference/models/text_detection/processors.py of …

paddlex | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
2.7 LOW
CVE-2026-9268 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
10.0 CRITICAL
CVE-2026-97229 — Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthe…

gitlab | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-96893 — Improper Neutralization of Input Used for LLM Prompting in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.7 HIGH
CVE-2026-92883 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in G…

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authen…

gitlab | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.2 MEDIUM
CVE-2026-92528 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentic…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-85529 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthe…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-84284 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthe…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
3.1 LOW
CVE-2026-82632 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.7 HIGH
CVE-2026-81839 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.8 MEDIUM
CVE-2026-7767 — URL Redirection to Untrusted Site ('Open Redirect') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authen…

gitlab | Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.2 MEDIUM
CVE-2026-78335 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.3 MEDIUM
CVE-2026-6567 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 14301 Results