| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-110607 | BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint | BizSpring | BizSpring Shop | Medium | 6.5 | 2026-10-14 14:16:47 | Deep Dive |
| CVE-2026-110606 | LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds Read via dwgReader18::readFileHeader | LibreCAD | libdxfrw | Low | 3.3 | 2026-10-14 14:16:46 | Deep Dive |
| CVE-2026-110605 | libschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_line | tomolt | libschrift | Medium | 5.5 | 2026-10-14 14:16:46 | Deep Dive |
| CVE-2026-110604 | Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod() | Michael R Sweet | Mini-XML | Low | 3.6 | 2026-10-14 14:16:45 | Deep Dive |
| CVE-2026-110603 | LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header | rapidlasso | LASzip | Medium | 6.3 | 2026-10-14 14:16:44 | Deep Dive |
| CVE-2026-110602 | libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path | kyz | libmspack | Medium | 6.3 | 2026-10-14 14:16:44 | Deep Dive |
| CVE-2026-110601 | libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 Heap Out-of-Bounds Write via GIF | saitoha | libsixel | Medium | 6.3 | 2026-10-14 14:16:43 | Deep Dive |
| CVE-2026-110600 | xlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Id | brechtsanders | xlsxio | Medium | 5.5 | 2026-10-14 14:16:42 | Deep Dive |
| CVE-2026-110599 | L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe | l-smash | l-smash | High | 7.1 | 2026-10-14 14:16:42 | Deep Dive |
| CVE-2026-110598 | Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value | libyal | libpff | Medium | 6.1 | 2026-10-14 14:16:41 | Deep Dive |
| CVE-2026-110596 | quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search | dlbeer | quirc | Medium | 5.5 | 2026-10-14 14:16:40 | Deep Dive |
| CVE-2026-110597 | Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory | syoyo | tinyexr | Medium | 6.1 | 2026-10-14 14:16:40 | Deep Dive |
| CVE-2026-110595 | BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import | MicroPyramid | BottleCRM | Medium | 4.3 | 2026-10-14 14:16:39 | Deep Dive |
| CVE-2026-110594 | BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex | MicroPyramid | BottleCRM | Medium | 4.9 | 2026-10-14 14:16:38 | Deep Dive |
| CVE-2026-110593 | BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail | MicroPyramid | BottleCRM | Medium | 5.4 | 2026-10-14 14:16:38 | Deep Dive |
| CVE-2026-110592 | BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template | MicroPyramid | BottleCRM | Low | 3.5 | 2026-10-14 14:16:37 | Deep Dive |
| CVE-2026-110270 | OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:36 | Deep Dive |
| CVE-2026-110591 | OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:36 | Deep Dive |
| CVE-2026-110263 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:35 | Deep Dive |
| CVE-2026-110262 | OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter | OW2 | ASM | Low | 3.3 | 2026-10-14 14:16:34 | Deep Dive |