Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105473 |
medium | 4.6 | 0.0012 | 2026-11-08 | IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 | |
CVE-2026-105467 |
high | 8.1 | 0.0022 | 2026-11-08 | IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 | |
CVE-2026-61987 |
medium | 6.5 | 0.0017 | 2026-11-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-120858 |
medium | 6.5 | 0.0021 | 2026-11-08 | Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exp | |
CVE-2026-114189 |
high | 8.5 | 0.0033 | 2026-11-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-114188 |
medium | 6.5 | 0.0017 | 2026-11-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-114186 |
medium | 6.5 | 0.0015 | 2026-11-08 | Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allow | |
CVE-2026-109900 |
critical | 9.6 | 0.0034 | 2026-11-08 | Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress- | |
CVE-2026-109899 |
high | 7.1 | 0.0022 | 2026-11-08 | Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-edit | |
CVE-2026-103320 |
medium | 4.3 | 0.0022 | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authent | |
CVE-2026-102618 |
low | 3.6 | 0.0009 | 2026-11-08 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated user to indirectly disable syste | |
CVE-2026-101117 |
critical | 9.1 | 0.0040 | 2026-11-08 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypas | |
CVE-2025-36075 |
medium | 5.3 | 0.0025 | 2026-11-08 | IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through | |
CVE-2025-1837 |
medium | 5.4 | 0.0018 | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 th | |
CVE-2025-0166 |
low | 2.7 | 0.0023 | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 th | |
CVE-2026-66034 |
high | 7.7 | 0.0042 | 2026-11-08 | libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerabi | |
CVE-2026-66033 |
high | 8.7 | 0.0058 | 2026-11-08 | libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer und | |
CVE-2026-66032 |
high | 8.7 | 0.0048 | 2026-11-08 | libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in t | |
CVE-2026-65693 |
high | 8.6 | 0.0092 | 2026-11-08 | Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that | |
CVE-2026-64255 |
high | 8.8 | 0.0027 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: v | |
CVE-2026-64254 |
medium | 5.5 | 0.0011 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_i | |
CVE-2026-64250 |
medium | 5.5 | 0.0016 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dyi | |
CVE-2026-64249 |
high | 7.8 | 0.0012 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use | |
CVE-2026-64248 |
medium | 5.5 | 0.0016 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dyi | |
CVE-2026-64247 |
high | 8.4 | 0.0015 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bo | |
CVE-2026-64246 |
high | 7.8 | 0.0012 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: power: reset: linksta | |
CVE-2026-64243 |
high | 7.1 | 0.0016 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple- | |
CVE-2026-64242 |
high | 7.8 | 0.0012 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: | |
CVE-2026-64241 |
medium | 5.5 | 0.0011 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teard | |
CVE-2026-64240 |
medium | 5.5 | 0.0011 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugus | |
CVE-2026-64238 |
medium | 5.5 | 0.0011 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix dea | |
CVE-2026-64235 |
high | 8.1 | 0.0033 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate | |
CVE-2026-64233 |
medium | 5.5 | 0.0011 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hol | |
CVE-2026-31221 |
high | 7.8 | 0.0039 | 2026-11-08 | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerabi | |
CVE-2026-36983 |
high | 7.3 | 0.0123 | 2026-11-08 | D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of | |
CVE-2026-31248 |
high | 7.5 | 0.0028 | 2026-11-08 | Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0 | |
CVE-2026-31247 |
high | 7.5 | 0.0035 | 2026-11-08 | Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0 | |
CVE-2026-38361 |
high | 7.5 | 0.0264 | 2026-11-08 | 1 PoC | Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 t |
CVE-2026-37461 |
high | 7.5 | 0.0034 | 2026-11-08 | An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allow | |
CVE-2026-31205 |
medium | 5.7 | 0.0028 | 2026-11-08 | Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacke | |
CVE-2026-26461 |
medium | 6.5 | 0.0077 | 2026-11-08 | A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.00 | |
CVE-2026-42469 |
high | 8.6 | 0.0036 | 2026-11-08 | Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canf | |
CVE-2026-42468 |
high | 8.8 | 0.0042 | 2026-11-08 | Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canf | |
CVE-2026-37540 |
critical | 9.8 | 0.0025 | 2026-11-08 | OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image | |
CVE-2026-37532 |
high | 7.1 | 0.0023 | 2026-11-08 | AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c | |
CVE-2026-37531 |
critical | 9.8 | 0.0071 | 2026-11-08 | AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE- | |
CVE-2026-37526 |
high | 7.8 | 0.0012 | 2026-11-08 | AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute | |
CVE-2026-37525 |
high | 7.8 | 0.0014 | 2026-11-08 | AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vul | |
CVE-2026-42481 |
medium | 5.5 | 0.0010 | 2026-11-08 | Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES an | |
CVE-2026-42480 |
medium | 5.5 | 0.0010 | 2026-11-08 | A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML par |