| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-110261 | OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:34 | Deep Dive |
| CVE-2026-110260 | OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:33 | Deep Dive |
| CVE-2026-110259 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions() | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:32 | Deep Dive |
| CVE-2026-110258 | OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:32 | Deep Dive |
| CVE-2026-110257 | OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute | OW2 | ASM | Medium | 5.5 | 2026-10-14 14:16:31 | Deep Dive |
| CVE-2024-58392 | PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint | icculus | PhysicsFS | Low | 3.3 | 2026-10-14 14:16:30 | Deep Dive |
| CVE-2025-71433 | Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access | usekaneo | kaneo | High | 7.5 | 2026-10-14 14:16:30 | Deep Dive |
| CVE-2020-37282 | office-converter through 1.0.2 OS Command Injection via fileName in generatePdf | vworld4u | office-converter | Critical | 9.8 | 2026-10-14 14:16:29 | Deep Dive |
| CVE-2017-20286 | DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalette | DentonW | DevIL | High | 7.8 | 2026-10-14 14:16:28 | Deep Dive |
| CVE-2020-37281 | Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass | Gravitee | Gravitee API Management | High | 8.1 | 2026-10-14 14:16:28 | Deep Dive |
| CVE-2016-20099 | L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe | l-smash | l-smash | Medium | 5.5 | 2026-10-14 14:16:27 | Deep Dive |
| CVE-2026-35161 | Dell PowerScale InsightIQ 账号锁定限制绕过导致拒绝服务 | Dell | PowerScale InsightIQ | Medium | 5.3 | 2026-10-14 14:09:58 | Deep Dive |
| CVE-2026-104086 | 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table | 7-Zip | 7-Zip | Medium | 5.5 | 2026-10-14 14:06:15 | Deep Dive |
| CVE-2026-107870 | WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability | Crocoblock | JetEngine | High | 7.1 | 2026-10-14 14:00:14 | Deep Dive |
| CVE-2026-94348 | Dell PowerScale InsightIQ 5.2.0-6.3.0 SQL注入漏洞 | Dell | PowerScale InsightIQ | Medium | 6.1 | 2026-10-14 13:57:29 | Deep Dive |
| CVE-2026-101215 | Dell Unisphere PowerMax 9.2.4.x OS命令注入漏洞 | Dell | Unisphere for PowerMax vApp | Medium | 6.6 | 2026-10-14 13:54:03 | Deep Dive |
| CVE-2026-101217 | Dell Unisphere for PowerMax 9.2.4.x 目录遍历导致信息泄露 | Dell | Unisphere for PowerMax vApp | Medium | 6.5 | 2026-10-14 13:50:09 | Deep Dive |
| CVE-2026-110690 | Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack | coderaiser | cloudcmd | High | 7.5 | 2026-10-14 13:45:20 | Deep Dive |
| CVE-2026-101216 | Dell Unisphere for PowerMax 9.2.4.x 命令注入漏洞 | Dell | Unisphere for PowerMax vApp | Medium | 6.6 | 2026-10-14 13:44:41 | Deep Dive |
| CVE-2026-108065 | Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce | Channel Software | WebAlliance eCommerce | Critical | 9.8 | 2026-10-14 13:38:04 | Deep Dive |