CVE-2026-103279 high Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103278 high Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103277 high Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103272 high Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103271 high Ghost 4.0.0 before 6.63.0 Restricted Content Bypass since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103268 high Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103266 high Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modification since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103262 high tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-96577 high oc-mirror__release-4.21: Embedded local cache registry listens on all interfaces without authentication, with delete enabled since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-83589 high oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-103431 high collectl: collectl: colmux does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 GHSA-chx6-46f5-w4vp high tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 GHSA-c2m8-h5v5-343r high Tornado: StaticFileHandler follows symlinks outside static root (path traversal) since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-103000 high pypdf: pypdf: Denial of Service via large alphabetical page labels since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102999 high pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102998 high pypdf: pypdf: Denial of Service via crafted PDF form fields since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102997 high pypdf: pypdf: Denial of Service via crafted FlateDecode stream since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102996 high pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102995 high pypdf: pypdf: Denial of Service via excessive memory consumption in font mapping since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102994 high pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102993 high pypdf: pypdf: Denial of Service via crafted Roman page labels since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102992 high piscina: piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102990 high basic-ftp: basic-ftp: Denial of Service via crafted Unix directory listings since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-55224 high MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-55177 high CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-19553 high python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-19445 high python: Use-after-free of a server-side SSLContext when sni_callback switches contexts since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-103241 high A flaw has been found in vllm-project vLLM up to 0.26.0. since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47602 high nvidia-driver: nvidia-driver: Denial of Service via untrusted pointer dereference since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47601 high nvidia-driver: nvidia-driver: Privilege escalation via improper memory access permissions in DMA-BUF import since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47600 high nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47599 high nvidia: nvidia: Privilege escalation via improper memory permissions during DMA mapping since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47597 high nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in Resource Server since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47596 high nvidia-driver: nvidia-driver: Privilege escalation via unpreserved memory permissions since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47595 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via write to read-only memory since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47594 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free driver commands since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47592 high nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47591 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via read-only memory protection bypass since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47590 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via crafted driver commands since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47589 high nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47588 high nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47587 high nvidia-driver: nvidia-driver: Privilege escalation via use-after-free since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47583 high nvidia-driver: nvidia-driver: Privilege escalation via type confusion in the kernel module since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47574 high nvidia-vgpu: nvidia-vgpu: Arbitrary code execution via incorrect resource transfer between spheres since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47572 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via kernel-mode type confusion since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47569 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via handle recycling race condition since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47563 high xorg-x11-drv-nvidia: xorg-x11-drv-nvidia: Privilege escalation via NULL pointer dereference in kernel mode layer since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47561 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via unvalidated ioctl buffer size since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47560 high nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-47559 high nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unauthorized cross-process memory access since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 