CVE-2026-62438 - Gimp: gimp: paa integer overflow out-of-bounds read
CVE ID :CVE-2026-62438 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 32 minutes ago Description :…
CVE
Updates on the latest vulnerabilities detected.
20.1K articles
CVE-2026-62439 - Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
CVE ID :CVE-2026-62439 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 32 minutes ago Description :…
CVE-2026-49410 - OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation
CVE ID :CVE-2026-49410 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 32 minutes ago Description :…
CVE-2026-111044 - Disabled Sunshine clients can bypass revocation with a derived client certificate
CVE ID :CVE-2026-111044 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 33 minutes ago Description …
CVE-2026-108372 - LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
CVE ID :CVE-2026-108372 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 33 minutes ago Description …
CVE-2026-30971 - ZoneMinder: Authenticated RCE via command injection in monitor Device Path
CVE ID :CVE-2026-30971 Published : Oct. 16, 2026, 7:40 p.m. | 8 minutes ago Description :ZoneMinder…
CVE-2026-108709 - Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)
CVE ID :CVE-2026-108709 Published : Oct. 16, 2026, 7:38 p.m. | 11 minutes ago Description :Authenti…
CVE-2026-69080 - Apache Kylin: Broken Access Control in QuerySQLBlacklistController
CVE ID :CVE-2026-69080 Published : Oct. 16, 2026, 7:37 p.m. | 11 minutes ago Description :Exposure …
CVE-2026-102608 - ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)
CVE ID :CVE-2026-102608 Published : Oct. 16, 2026, 7:35 p.m. | 14 minutes ago Description :ZoneMind…
CVE-2026-69077 - Apache Kylin: JobController allows unauthorized cross-project manipulation
CVE ID :CVE-2026-69077 Published : Oct. 16, 2026, 7:33 p.m. | 16 minutes ago Description :Exposure …
CVE-2026-69076 - Apache Kylin: Unauthorized cross-project job discard
CVE ID :CVE-2026-69076 Published : Oct. 16, 2026, 7:32 p.m. | 17 minutes ago Description :Exposure …