| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-109556 | EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC | tianma-if | EdgeEver | High | 8.0 | 2026-10-12 20:55:12 | Deep Dive |
| CVE-2026-109380 | modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field | ayuhito | modern-tar | High | 7.5 | 2026-10-12 20:55:12 | Deep Dive |
| CVE-2026-109379 | Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check | cockpit-hq | cockpit | Medium | 5.3 | 2026-10-12 20:55:11 | Deep Dive |
| CVE-2026-109378 | SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url | SPIP | SPIP | Medium | 4.3 | 2026-10-12 20:55:10 | Deep Dive |
| CVE-2026-109377 | ERPNext 9.0.0 through 16.50.0 Missing Authorization in Batch Lookup Methods | Frappe | ERPNext | Medium | 4.3 | 2026-10-12 20:55:10 | Deep Dive |
| CVE-2026-109375 | Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction | Vercel | deepsec | Medium | 6.1 | 2026-10-12 20:55:09 | Deep Dive |
| CVE-2026-109376 | ERPNext 15.55.0 through 16.50.0 Incorrect Authorization via get_timesheet_html | Frappe | ERPNext | Medium | 4.3 | 2026-10-12 20:55:09 | Deep Dive |
| CVE-2025-71429 | GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py | RVC-Boss | GPT-SoVITS | Critical | 9.8 | 2026-10-12 20:55:08 | Deep Dive |
| CVE-2024-58389 | HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next Parameter | HoloViz | Panel | Medium | 6.1 | 2026-10-12 20:55:07 | Deep Dive |
| CVE-2022-51020 | Flower before 2.2.0 CSRF via Worker and Task Control API Endpoints | mher | flower | Medium | 5.9 | 2026-10-12 20:55:07 | Deep Dive |
| CVE-2021-48012 | fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOML | Gin-Quin | fast-toml | High | 8.2 | 2026-10-12 20:55:06 | Deep Dive |
| CVE-2021-48011 | Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments | lukejacksonn | servor | High | 7.5 | 2026-10-12 20:55:05 | Deep Dive |
| CVE-2020-37280 | cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths | PelionIoT | cbor-sync | High | 7.5 | 2026-10-12 20:55:05 | Deep Dive |
| CVE-2020-37279 | easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function | karuppiah7890 | easy-pdf-merge | High | 8.1 | 2026-10-12 20:55:04 | Deep Dive |
| CVE-2026-16678 | IBM Power Systems Firmware Denial of Service | IBM | Virtualization Management Interface | Medium | 4.5 | 2026-10-12 20:52:45 | Deep Dive |
| CVE-2026-96261 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 7.3 | 2026-10-12 20:52:36 | Deep Dive |
| CVE-2026-96262 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:29 | Deep Dive |
| CVE-2026-96263 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:21 | Deep Dive |
| CVE-2026-96264 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:11 | Deep Dive |
| CVE-2026-96265 | IBM Power Systems Firmware Improper Memory Buffer Restriction | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:01 | Deep Dive |