Browse All CVEs
40,593 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-101424 |
medium | 5.8 | 0.0032 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101426 |
medium | 6.9 | 0.0013 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101427 |
high | 8.1 | 0.0035 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101434 |
high | 7.6 | 0.0027 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-121512 |
high | 7.5 | 0.0045 | 2026-11-03 | Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated | |
CVE-2026-121513 |
high | 7.5 | 0.0044 | 2026-11-03 | Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacke | |
CVE-2026-121510 |
high | 7.5 | 0.0045 | 2026-11-03 | Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser | |
CVE-2026-121511 |
high | 7.1 | 0.0014 | 2026-11-03 | Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory | |
CVE-2026-121507 |
medium | 5.9 | 0.0038 | 2026-11-03 | Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attac | |
CVE-2026-121508 |
medium | 5.9 | 0.0038 | 2026-11-03 | Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to | |
CVE-2026-121505 |
low | 3.7 | 0.0029 | 2026-11-03 | An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_co | |
CVE-2026-121506 |
high | 7.4 | 0.0045 | 2026-11-03 | An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) | |
CVE-2026-106991 |
high | 7.1 | 0.0041 | 2026-11-03 | 1 PoC | hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered |
CVE-2026-120572 |
high | 8.8 | 0.0033 | 2026-11-03 | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerabilit | |
CVE-2026-89295 |
— | — | 0.0021 | 2026-11-03 | In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical | |
CVE-2026-85034 |
medium | 6.7 | 0.0024 | 2026-11-03 | The Bluetooth host's GATT client passed the value of a received Handle Value Notification, | |
CVE-2026-85035 |
high | 8.8 | 0.0023 | 2026-11-03 | The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq | |
CVE-2026-85032 |
medium | 4.8 | 0.0018 | 2026-11-03 | The MCTP over USB device class in subsys/pmci/mctp/mctp_usb.c splits RX handling across tw | |
CVE-2026-85033 |
medium | 4.6 | 0.0022 | 2026-11-03 | The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent | |
CVE-2026-119179 |
high | 8.3 | 0.0030 | 2026-11-03 | A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled | |
CVE-2026-119742 |
high | 8.6 | 0.0409 | 2026-11-03 | Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload f | |
CVE-2026-1961 |
high | 8.0 | 0.0192 | 2026-11-03 | 1 PoC | A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerabi |
CVE-2026-101539 |
medium | 6.5 | 0.0035 | 2026-11-03 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101544 |
high | 7.0 | 0.0011 | 2026-11-03 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101292 |
high | 8.2 | 0.0052 | 2026-11-03 | Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in Feder | |
CVE-2025-49520 |
high | 8.8 | 0.0062 | 2026-11-03 | A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git UR | |
CVE-2025-49521 |
high | 8.8 | 0.0060 | 2026-11-03 | A flaw was found in the EDA component of the Ansible Automation Platform, where user-suppl | |
CVE-2026-121458 |
high | 7.1 | 0.0031 | 2026-11-03 | Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP conten | |
CVE-2026-65160 |
medium | 5.5 | 0.0016 | 2026-11-03 | NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A s | |
CVE-2026-108060 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108058 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108059 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108056 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108057 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108054 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108055 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108052 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108053 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108050 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108051 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108048 |
medium | 6.9 | 0.0040 | 2026-11-03 | Vulnerability due to a lack of request limits in Alosuite’s password recovery functionalit | |
CVE-2026-108049 |
medium | 5.1 | 0.0042 | 2026-11-03 | Clickjacking vulnerability in the Alosuite web application. The affected login interface c | |
CVE-2026-108046 |
medium | 6.9 | 0.0039 | 2026-11-03 | Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization | |
CVE-2026-108047 |
high | 8.6 | 0.0028 | 2026-11-03 | Inadequate authorization vulnerability in Alosuite’s user invitation functionality. The ‘/ | |
CVE-2026-76124 |
high | 8.8 | 0.0044 | 2026-11-03 | The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versi | |
CVE-2026-99270 |
high | 8.1 | 0.0031 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UA | |
CVE-2024-7885 |
high | 7.5 | 0.0264 | 2026-11-03 | A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same | |
CVE-2026-42784 |
high | 7.4 | 0.0031 | 2026-11-03 | A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older ce | |
CVE-2026-99269 |
high | 7.8 | 0.0015 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for S | |
CVE-2026-99267 |
— | — | 0.0019 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority |