https://vulnpost.com/news/vulnerabilities/pillow-emf-wmf-heap-over-read-on-windows-cve-2026/Vuln Posten2026-10-22T16:15:37ZPillow EMF/WMF Heap Over-Read on Windows CVE-2026-96644https://vulnpost.com/news/vulnerabilities/javo-spot-wordpress-theme-path-traversal-flaw/Vuln Posten2026-10-22T14:05:25ZJavo Spot WordPress Theme Path Traversal Flaw Exposes Database Credentialshttps://vulnpost.com/news/vulnerabilities/json-scada-sql-injection-flaw-lets-authenticated/Vuln Posten2026-10-22T11:32:00ZJSON-SCADA SQL Injection Flaw Lets Authenticated Users Manipulate Datahttps://vulnpost.com/news/vulnerabilities/lotus-0-10-2-sql-injection-allows-authenticated/Vuln Posten2026-10-22T11:30:30ZLotus 0.10.2 SQL Injection Allows Authenticated Users to Execute Arbitrary Querieshttps://vulnpost.com/news/vulnerabilities/cozmoslabs-profile-builder-cve-2026-112242/Vuln Posten2026-10-22T08:43:31ZCozmoslabs Profile Builder CVE-2026-112242 Privilege Escalation Flawhttps://vulnpost.com/news/vulnerabilities/openai-proposes-framework-for-ai-discovered-php/Vuln Posten2026-10-22T08:13:48ZOpenAI proposes framework for AI-discovered PHP vulnerabilities ahead of sharp bug surgehttps://vulnpost.com/news/vulnerabilities/tms-amelia-sql-injection-cve-2026-112327-exposes/Vuln Posten2026-10-22T07:43:45ZTMS Amelia SQL Injection CVE-2026-112327 Exposes Databases in Versions Up to 2.4.11https://vulnpost.com/news/vulnerabilities/dropbox-esaml-library-has-critical-data/Vuln Posten2026-10-22T07:33:45ZDropbox esaml Library Has Critical Data Amplification Flawhttps://vulnpost.com/news/vulnerabilities/aspose-importer-pre-3-0-path-traversal-risks-wp/Vuln Posten2026-10-22T01:35:18ZAspose Importer Pre-3.0 Path Traversal Risks wp-config.php Credential Leakhttps://vulnpost.com/news/vulnerabilities/ibm-qradar-siem-out-of-bounds-read-flaw-puts/Vuln Posten2026-10-22T00:40:55ZIBM QRadar SIEM Out-of-Bounds Read Flaw Puts Versions 7.5 and 7.6 at Riskhttps://vulnpost.com/news/vulnerabilities/astral-uv-high-severity-arbitrary-file-write/Vuln Posten2026-10-22T00:03:02ZAstral uv High-Severity Arbitrary File Write Vulnerability in Source Distributions Before 0.8.22https://vulnpost.com/news/vulnerabilities/oneplus-oxygenos-flaw-exposes-dangerous-methods/Vuln Posten2026-10-21T20:26:17ZOnePlus OxygenOS Flaw Exposes Dangerous Methods on Older Android Versionshttps://vulnpost.com/news/vulnerabilities/shopper-cms-cve-2026-114387-missing-authorization/Vuln Posten2026-10-21T20:06:02ZShopper CMS CVE-2026-114387 Missing Authorization Flaw Allows Admin Escalationhttps://vulnpost.com/news/vulnerabilities/cisco-expressway-x8-fixes-high-severity-out-of/Vuln Posten2026-10-21T18:19:46ZCisco Expressway X8 Fixes High-Severity Out-of-Bounds Write in Hardening Updateshttps://vulnpost.com/news/vulnerabilities/virtualenv-21-14-1-fixes-high-severity-code/Vuln Posten2026-10-21T18:01:11Zvirtualenv 21.14.1 fixes high-severity code execution in Fish shell activationhttps://vulnpost.com/news/vulnerabilities/follow-redirects-cve-2026-111755-regex-flaw-leaks/Vuln Posten2026-10-21T09:40:33Zfollow-redirects CVE-2026-111755: Regex flaw leaks headers with pipes/carets during cross-origin redirectshttps://vulnpost.com/news/vulnerabilities/chrome-156-skia-memory-corruption-fixes-address/Vuln Posten2026-10-21T08:27:38ZChrome 156 Skia Memory Corruption Fixes Address 353 Desktop Security Flawshttps://vulnpost.com/news/vulnerabilities/argo-cd-kustomize-flaw-enables-critical-rce-on/Vuln Posten2026-10-21T07:47:21ZArgo CD Kustomize Flaw Enables Critical RCE on Repo Servers; Patches Availablehttps://vulnpost.com/news/vulnerabilities/ibm-app-connect-enterprise-flaw-allows-remote/Vuln Posten2026-10-21T06:58:19ZIBM App Connect Enterprise Flaw Allows Remote Data Theft via IP Bindinghttps://vulnpost.com/news/vulnerabilities/php-critical-rce-flaws-prompt-emergency-patch-for/Vuln Posten2026-10-21T06:12:34ZPHP Critical RCE Flaws Prompt Emergency Patch for Supported Versionshttps://vulnpost.com/news/vulnerabilities/totolink-x2000r-router-rce-vulnerability-allows/Vuln Posten2026-10-21T03:45:17ZTotolink X2000R Router RCE Vulnerability Allows Arbitrary Code Execution Via HTTP Requesthttps://vulnpost.com/news/vulnerabilities/pillow-13-0-0-fixes-high-severity-heap-buffer/Vuln Posten2026-10-21T03:33:17ZPillow 13.0.0 Fixes High-Severity Heap Buffer Over-Read in TIFF Decoderhttps://vulnpost.com/news/vulnerabilities/php-remote-code-execution-flaws-emergency-patches/Vuln Posten2026-10-21T02:46:49ZPHP Remote Code Execution Flaws: Emergency Patches Scheduled for October 21https://vulnpost.com/news/vulnerabilities/totolink-x2000r-stack-overflow-in-boa-formipqos/Vuln Posten2026-10-21T02:30:30ZTotolink X2000R Stack Overflow in boa formIpQos Enables Arbitrary Code Executionhttps://vulnpost.com/news/vulnerabilities/totolink-x2000r-ipv6-config-buffer-overflows/Vuln Posten2026-10-21T01:14:54ZTotolink X2000R IPv6 Config Buffer Overflows Enable Authenticated Remote Code Executionhttps://vulnpost.com/news/vulnerabilities/totolink-x2000r-pppoe-stack-overflow-bugs-enable/Vuln Posten2026-10-21T00:28:21ZTotolink X2000R PPPoE Stack Overflow Bugs Enable Authenticated Code Executionhttps://vulnpost.com/news/vulnerabilities/oracle-e-business-suite-tcf-servlet-sql-injection/Vuln Posten2026-10-21T00:04:30ZOracle E-Business Suite TCF Servlet SQL Injection Allows Remote Code Executionhttps://vulnpost.com/news/vulnerabilities/oracle-october-cpu-fixes-1209-cves-with-112/Vuln Posten2026-10-20T22:39:35ZOracle October CPU Fixes 1209 CVEs With 112 Critical Patcheshttps://vulnpost.com/news/vulnerabilities/apache-tomcat-http-2-async-flaw-mixes-user/Vuln Posten2026-10-20T18:15:50ZApache Tomcat HTTP/2 Async Flaw Mixes User Requestshttps://vulnpost.com/news/vulnerabilities/go-1-27-3-and-1-26-10-released-for-ca-certificate/Vuln Posten2026-10-20T18:12:53ZGo 1.27.3 and 1.26.10 Released for CA Certificate Removalhttps://vulnpost.com/news/vulnerabilities/apache-tomcat-jstl-plug-in-has-low-severity/Vuln Posten2026-10-20T17:57:31ZApache Tomcat JSTL Plug-in Has Low-Severity Execution After Redirect Flawhttps://vulnpost.com/news/vulnerabilities/openstack-cinder-messages-api-flaw-leaks-cross/Vuln Posten2026-10-20T17:28:55ZOpenStack Cinder Messages API flaw leaks cross-project datahttps://vulnpost.com/news/vulnerabilities/openstack-manila-fixes-cross-project-share/Vuln Posten2026-10-20T17:27:32ZOpenStack Manila Fixes Cross-Project Share Metadata Flaw in CVE-2026-71195https://vulnpost.com/news/vulnerabilities/roundcube-webmail-patches-command-injection-and/Vuln Posten2026-10-20T17:02:45ZRoundcube Webmail Patches Command Injection and XSS Flawshttps://vulnpost.com/news/vulnerabilities/mozilla-issues-guidance-following-emudhra/Vuln Posten2026-10-20T16:51:25ZMozilla Issues Guidance Following eMudhra Intermediate Certificate Compromise