Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-104338 |
low | 3.7 | 0.0017 | 2026-11-08 | The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorizati | |
CVE-2026-104337 |
medium | 5.3 | 0.0021 | 2026-11-08 | The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an | |
CVE-2026-104307 |
medium | 5.4 | 0.0019 | 2026-11-08 | The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an | |
CVE-2026-103375 |
medium | 5.3 | 0.0019 | 2026-11-08 | The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or autho | |
CVE-2026-103303 |
high | 8.8 | 0.0019 | 2026-11-08 | The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation an | |
CVE-2026-114713 |
high | 8.6 | 0.0030 | 2026-11-08 | KEV | UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that |
CVE-2026-124422 |
medium | 5.3 | 0.0024 | 2026-11-08 | SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in | |
CVE-2026-123616 |
high | 8.7 | 0.0047 | 2026-11-08 | imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in | |
CVE-2026-123615 |
high | 8.7 | 0.0053 | 2026-11-08 | imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO load | |
CVE-2026-123614 |
critical | 9.3 | 0.0066 | 2026-11-08 | imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allo | |
CVE-2026-123613 |
medium | 6.9 | 0.0016 | 2026-11-08 | Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encrypt | |
CVE-2026-123612 |
medium | 4.6 | 0.0011 | 2026-11-08 | rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends appl | |
CVE-2026-123611 |
medium | 6.3 | 0.0019 | 2026-11-08 | rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network | |
CVE-2026-123610 |
medium | 6.3 | 0.0016 | 2026-11-08 | rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brot | |
CVE-2026-123609 |
medium | 4.1 | 0.0010 | 2026-11-08 | Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclos | |
CVE-2026-123608 |
high | 8.7 | 0.0041 | 2026-11-08 | Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerabil | |
CVE-2026-123607 |
high | 8.7 | 0.0034 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 cont | |
CVE-2026-123606 |
high | 8.7 | 0.0041 | 2026-11-08 | The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-res | |
CVE-2026-123605 |
high | 8.7 | 0.0024 | 2026-11-08 | Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain | |
CVE-2026-123604 |
high | 8.7 | 0.0034 | 2026-11-08 | Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop | |
CVE-2026-123603 |
medium | 6.9 | 0.0017 | 2026-11-08 | hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 bef | |
CVE-2026-123602 |
high | 8.2 | 0.0027 | 2026-11-08 | The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26. | |
CVE-2026-123601 |
high | 8.3 | 0.0028 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 befo | |
CVE-2026-123600 |
medium | 6.3 | 0.0020 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 bef | |
CVE-2026-123599 |
medium | 6.3 | 0.0012 | 2026-11-08 | Hickory DNS hickory-proto before 0.26.0-beta.1 and hickory-net before 0.26.2 contain a DNS | |
CVE-2026-123598 |
medium | 6.3 | 0.0027 | 2026-11-08 | The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hic | |
CVE-2026-123597 |
medium | 6.3 | 0.0022 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.2 | |
CVE-2026-123596 |
high | 8.7 | 0.0019 | 2026-11-08 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26 | |
CVE-2026-123595 |
high | 8.7 | 0.0019 | 2026-11-08 | Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before | |
CVE-2026-123594 |
medium | 6.3 | 0.0012 | 2026-11-08 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26 | |
CVE-2026-123593 |
medium | 6.3 | 0.0025 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26. | |
CVE-2026-123592 |
high | 8.2 | 0.0028 | 2026-11-08 | The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation | |
CVE-2026-123591 |
high | 8.2 | 0.0013 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha | |
CVE-2026-123590 |
medium | 6.3 | 0.0016 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha | |
CVE-2026-123589 |
medium | 6.9 | 0.0033 | 2026-11-08 | The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not appl | |
CVE-2026-123588 |
high | 8.7 | 0.0034 | 2026-11-08 | The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hic | |
CVE-2026-123587 |
high | 8.9 | 0.0024 | 2026-11-08 | The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies | |
CVE-2026-123586 |
high | 8.7 | 0.0034 | 2026-11-08 | Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in | |
CVE-2026-123585 |
medium | 6.9 | 0.0030 | 2026-11-08 | The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAM | |
CVE-2026-123584 |
high | 8.2 | 0.0037 | 2026-11-08 | The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an e | |
CVE-2026-123583 |
medium | 6.3 | 0.0012 | 2026-11-08 | The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-r | |
CVE-2026-123582 |
medium | 6.3 | 0.0012 | 2026-11-08 | The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) | |
CVE-2026-123581 |
medium | 6.9 | 0.0013 | 2026-11-08 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26 | |
CVE-2026-123580 |
high | 8.7 | 0.0026 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha | |
CVE-2026-123579 |
medium | 6.3 | 0.0022 | 2026-11-08 | DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto | |
CVE-2026-123578 |
medium | 6.3 | 0.0028 | 2026-11-08 | Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip | |
CVE-2026-123577 |
high | 8.7 | 0.0041 | 2026-11-08 | Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that al | |
CVE-2026-123576 |
high | 8.7 | 0.0041 | 2026-11-08 | Hickory DNS 0.24.0 through 0.26.1 contains a memory exhaustion vulnerability that allows r | |
CVE-2026-123575 |
high | 8.7 | 0.0041 | 2026-11-08 | Hickory DNS before 0.26.2 contains a resource exhaustion vulnerability in its DNS-over-HTT | |
CVE-2026-123574 |
high | 8.7 | 0.0034 | 2026-11-08 | The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics |