PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

Every cached source, newest first. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,292 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates · Some delayed

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  7. NVD

    CVE-2026-112177 — A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted du…

    High · CVSS 3.1 7.3 · Assessor: [email protected]

    A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.

    CVE-2026-112177
    Read original (opens in a new tab)
  8. NVD

    CVE-2026-111090 — A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license fil…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.

    CVE-2026-111090
    Read original (opens in a new tab)
  9. NVD

    CVE-2024-2323 — The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validati…

    Medium · CVSS 3.1 4.8 · Assessor: ed10eef1-636d-4fbe-9993-6890dfa878f8

    The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker to repeatedly attempt password guesses for a user account without being adequately restricted. Exploiting this vulnerability enables an attacker to discover a user's password through brute force, leading to account impersonation. The success rate of such an attack is influenced by the complexity of the targeted user's password, with sim…

    CVE-2024-2323
    Read original (opens in a new tab)
  10. NVD

    CVE-2026-93878 — The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in al…

    Medium · CVSS 3.1 6.4 · Assessor: [email protected]

    The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload executes when an administrator visits the DiviGear > Activation settings page, wh…

    CVE-2026-93878
    Read original (opens in a new tab)
  11. NVD

    CVE-2026-113404 — WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-cod…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.

    CVE-2026-113404
    Read original (opens in a new tab)
  12. NVD

    CVE-2026-113403 — ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.

    CVE-2026-113403
    Read original (opens in a new tab)
  13. NVD

    CVE-2026-113402 — ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers c…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.

    CVE-2026-113402
    Read original (opens in a new tab)
  14. NVD

    CVE-2026-112148 — A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS)…

    Medium · CVSS 4.0 5.1 · Assessor: [email protected]

    A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute arbitrary JavaScript in the origin of an affected LIFF application's endpoint when a user opens a specially crafted URL in an external browser, potentially leading to disclosure of JavaScript-accessible authentication tokens or application data, or unauthorized actions using the user's session.

    CVE-2026-112148
    Read original (opens in a new tab)
  15. NVD

    CVE-2026-110725 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3…

    Low · CVSS 3.1 3.7 · Assessor: ce714d77-add3-4f53-aff5-83d477b104bb

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize(), normalize(), or resolve() are called with the non-default option reference set to suffix on a reference that has no authority, the emitted relative reference can contain a bare colon in its first path segment without escaping it, even though RFC 3986 forbids that because it makes the string reparse as an absolute URI with a scheme. An appl…

    CVE-2026-110725
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-110306 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3…

    Medium · CVSS 3.1 6.1 · Assessor: ce714d77-add3-4f53-aff5-83d477b104bb

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape() function before validating it, so an input whose decoded scheme is a dangerous token is emitted as a live scheme even though RFC 3986 does not allow percent-encoding in a scheme and no other parser accepts it. An application that screens dangerous schemes on the raw input and th…

    CVE-2026-110306
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-110180 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1…

    Medium · CVSS 3.1 4.8 · Assessor: ce714d77-add3-4f53-aff5-83d477b104bb

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost() function passes the parsed host to the WHATWG URL parser and adopts its hostname without checking that the parser consumed the entire input as a host, so the authority can be silently rewritten: data before an at-sign is dropped and tab, carriage-return, and line-feed characters are stripped, with n…

    CVE-2026-110180
    Read original (opens in a new tab)
  18. NVD

    CVE-2026-110095 — fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3…

    Low · CVSS 3.1 3.7 · Assessor: ce714d77-add3-4f53-aff5-83d477b104bb

    fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and serialize() functions apply RFC 3986 dot-segment removal to the path of a relative-path reference, even though that algorithm is defined only for the merged target path during resolution, so a leading parent-directory segment can be dropped and a document-relative reference can become root-relative. An application that normalizes an atta…

    CVE-2026-110095
    Read original (opens in a new tab)
  20. NVD

    CVE-2026-96903 — The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-ma…

    Medium · CVSS 3.1 4.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-management read AJAX actions, allowing any authenticated user with a role as low as subscriber to read other users' CRM contact and lead records, including their private activity notes.

    CVE-2026-96903
    Read original (opens in a new tab)
  21. NVD

    CVE-2026-96902 — The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST…

    Medium · CVSS 3.1 5.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read details a site has chosen to hide on published listings, such as the asking price, sold price, street address and exact map coordinates.

    CVE-2026-96902
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-93300 — The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versio…

    High · CVSS 3.1 7.5 · Assessor: [email protected]

    The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

    CVE-2026-93300
    Read original (opens in a new tab)
  23. NVD

    CVE-2026-100737 — Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user wh…

    Medium · CVSS 4.0 6.9 · Assessor: [email protected]

    Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.

    CVE-2026-100737
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-113386 — Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attack…

    High · CVSS 3.1 7.1 · Assessor: [email protected]

    Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequences injected into the _uid parameter of the mail/headers and mail/viewsource actions to execute arbitrary IMAP commands.

    CVE-2026-113386
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.