Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.3 CRITICAL
CVE-2026-109520 — Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined wit…

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This man…

igamecenter | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.3 HIGH
CVE-2026-109519 — YouTransfer Template Rendering template path traversal

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in pa…

youtransfer | Remote | Path Traversal
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.8 MEDIUM
CVE-2026-109410 — macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calc…

A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-adm…

mall | Remote | Misconfiguration
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.3 MEDIUM
CVE-2026-109409 — HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injec…

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open F…

toonflow-app | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
3.7 LOW
CVE-2026-107832 — fastify vulnerable to header validation bypass via case-sensitive propertyNames

fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowercase the enum or con…

fastify | Authorization
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.5 HIGH
CVE-2026-103499 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by…

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of serv…

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.8 MEDIUM
CVE-2026-0893 — Uncleared Password Keystrokes Vulnerability

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can…

aptio_v | Information Disclosure
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.3 HIGH
CVE-2025-58774 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overf…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.1 HIGH
CVE-2025-58773 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause  "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corrupti…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.2 HIGH
CVE-2025-58772 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corr…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.1 HIGH
CVE-2025-58771 — UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memor…

aptio_v | Memory Corruption
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
4.4 MEDIUM
CVE-2026-67456 — NVIDIA Warp Heap-Based Buffer Overflow

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

| Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-65180 — NVIDIA Megatron-LM Arbitrary Code Execution Vulnerability

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerabilit…

megatron-lm | Supply Chain
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.1 CRITICAL
CVE-2026-65173 — NVIDIA AIStore Missing Authentication Vulnerability

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A success…

Remote | Authentication
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65172 — NVIDIA AIStore Missing Authorization Vulnerability

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existin…

Remote | Authorization
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.6 HIGH
CVE-2026-65170 — NVIDIA AIStore Server-Side Request Forgery

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A …

Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.1 HIGH
CVE-2026-65164 — NVIDIA AIStore Path Traversal Vulnerability

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted direc…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
10.0 CRITICAL
CVE-2026-65162 — NVIDIA AIStore Improper Input Validation Vulnerability

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.…

Remote | Misconfiguration
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-65161 — NVIDIA AIStore Arbitrary File Read Vulnerability

NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source pa…

Remote | Path Traversal
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-65150 — NVIDIA DALI Out-of-Bounds Read Vulnerability

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering…

data_loading_library | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
Showing 20 of 18872 Results