Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted i...
First reported Oct 07, 2026 16:19 UTCCatalog metadata updated Oct 08, 2026 03:55 UTCOpen evidence recordExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-nam...
First reported Oct 07, 2026 17:11 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent ...
First reported Oct 07, 2026 16:42 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.
First reported Oct 07, 2026 17:07 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted i...
First reported Oct 07, 2026 16:19 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows St...
First reported Oct 07, 2026 16:55 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel can allocate far ...
First reported Oct 07, 2026 17:36 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordDocker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves al...
First reported Oct 07, 2026 16:44 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted i...
First reported Oct 07, 2026 16:19 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts...
First reported Oct 07, 2026 17:03 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordDeserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elemen...
First reported Oct 07, 2026 17:00 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordMissing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2.
First reported Oct 07, 2026 17:09 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIndicator published by the cited source.
First reported Oct 07, 2026 16:44 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1.
First reported Oct 07, 2026 16:57 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Da...
First reported Oct 07, 2026 17:05 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted i...
First reported Oct 07, 2026 16:19 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit...
First reported Oct 07, 2026 17:29 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordBackstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdown extension conf...
First reported Oct 07, 2026 16:22 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subs...
First reported Oct 07, 2026 16:55 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width * height (and related) arithmetic while ...
First reported Oct 07, 2026 17:36 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
First reported Oct 07, 2026 17:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImproper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabi...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username that ends with a period. The vu...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImproper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.