Security Operations
Threat Intelligence
❓
HIGH
CVE-2026-45049 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`C
NEAR-REAL-TIME
CVE-2026-45049 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
MEDIUM
CVE-2026-119317 - On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the
NEAR-REAL-TIME
CVE-2026-119317 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
linux
Source ↗
INFORMATIONAL
CVE-2026-115943 - Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce
NEAR-REAL-TIME
CVE-2026-115943 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
HIGH
CVE-2026-119286 - graphql-core: graphql-core: Denial of Service via unbounded memory growth during document validation
NEAR-REAL-TIME
CVE-2026-119286 · Red Hat - CVE Feed · published 2026-10-29T21:38 · correlated from 3 sources
Red Hatgraphql-core
Source ↗
MEDIUM
CVE-2026-119284 - joserfc: joserfc: Denial of Service via excessive memory allocation during JWS deserialization
NEAR-REAL-TIME
CVE-2026-119284 · Red Hat - CVE Feed · published 2026-10-29T21:33 · correlated from 3 sources
Red Hatjoserfc
Source ↗
INFORMATIONAL
CVE-2026-61576 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook
NEAR-REAL-TIME
CVE-2026-61576 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
HIGH
CVE-2026-13303 - HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store
NEAR-REAL-TIME
CVE-2026-13303 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
HIGH
CVE-2026-119325 - Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_po
NEAR-REAL-TIME
CVE-2026-119325 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
wordpress
Source ↗
MEDIUM
CVE-2026-119278 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3
NEAR-REAL-TIME
CVE-2026-119278 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
MEDIUM
CVE-2026-119277 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3
NEAR-REAL-TIME
CVE-2026-119277 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
HIGH
CVE-2026-119283 - joserfc: joserfc: Denial of Service via unbounded recipient processing during JWE decryption
NEAR-REAL-TIME
CVE-2026-119283 · Red Hat - CVE Feed · published 2026-10-29T21:10 · correlated from 3 sources
Red Hatjoserfc
Source ↗
LOW
CVE-2026-119280 - org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via unvalidated lengths during XA recovery
NEAR-REAL-TIME
CVE-2026-119280 · Red Hat - CVE Feed · published 2026-10-29T20:55 · correlated from 3 sources
Red Hatorg.mariadb.jdbc:mariadb-java-client
Source ↗
HIGH
CVE-2026-119209 - pypdf: pypdf: Denial of Service via crafted cross-reference streams
NEAR-REAL-TIME
CVE-2026-119209 · Red Hat - CVE Feed · published 2026-10-29T20:43 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119208 - pypdf: pypdf: Denial of Service via forged page count in encrypted PDFs
NEAR-REAL-TIME
CVE-2026-119208 · Red Hat - CVE Feed · published 2026-10-29T20:41 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119207 - pypdf: pypdf: Denial of Service via crafted invalid PDF dictionary
NEAR-REAL-TIME
CVE-2026-119207 · Red Hat - CVE Feed · published 2026-10-29T20:38 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119206 - pypdf: pypdf: Denial of Service via crafted PDF page labels
NEAR-REAL-TIME
CVE-2026-119206 · Red Hat - CVE Feed · published 2026-10-29T20:37 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119205 - pypdf: pypdf: Denial of Service via infinite loop during dictionary cloning
NEAR-REAL-TIME
CVE-2026-119205 · Red Hat - CVE Feed · published 2026-10-29T20:35 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119204 - pypdf: pypdf: Denial of Service via excessive memory consumption during PDF parsing
NEAR-REAL-TIME
CVE-2026-119204 · Red Hat - CVE Feed · published 2026-10-29T20:34 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119203 - pypdf: pypdf: Denial of Service via infinite loop on crafted incomplete PDF
NEAR-REAL-TIME
CVE-2026-119203 · Red Hat - CVE Feed · published 2026-10-29T20:30 · correlated from 3 sources
Red Hatpypdf
Source ↗
INFORMATIONAL
CVE-2026-67205 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-67205 · NIST NVD - National Vulnerability Database · published 2026-10-29T20:17
Source ↗