Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-56264 |
high | 7.5 | 0.0040 | 2026-11-07 | The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerab | |
CVE-2025-56263 |
high | 8.8 | 0.0041 | 2026-11-07 | by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg | |
CVE-2026-123990 |
medium | 5.5 | 0.0026 | 2026-11-07 | A security vulnerability has been detected in DataEase up to 2.10.27/3.1.0. Affected is th | |
CVE-2026-123991 |
medium | 6.9 | 0.0047 | 2026-11-07 | A vulnerability was detected in DataEase up to 2.10.27. Affected by this vulnerability is | |
CVE-2026-123989 |
medium | 5.3 | 0.0044 | 2026-11-07 | A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the func | |
CVE-2026-124318 |
high | 8.6 | 0.0056 | 2026-11-07 | Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_ | |
CVE-2026-124317 |
medium | 6.3 | 0.0025 | 2026-11-07 | libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() a | |
CVE-2026-124316 |
medium | 5.3 | 0.0022 | 2026-11-07 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vu | |
CVE-2026-124315 |
high | 7.1 | 0.0026 | 2026-11-07 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vu | |
CVE-2026-124314 |
high | 7.1 | 0.0026 | 2026-11-07 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vu | |
CVE-2026-124313 |
medium | 5.3 | 0.0022 | 2026-11-07 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vu | |
CVE-2026-124312 |
medium | 5.7 | 0.0012 | 2026-11-07 | Fraunhofer HHI VVdeC through 3.2.1 contains a heap out-of-bounds read vulnerability that a | |
CVE-2026-124311 |
medium | 6.8 | 0.0012 | 2026-11-07 | Fraunhofer HHI VVdeC through 3.2.1 contains a NULL pointer dereference vulnerability in In | |
CVE-2026-124310 |
medium | 6.9 | 0.0012 | 2026-11-07 | Fraunhofer HHI VVdeC before 3.2.1 contains an out-of-bounds read vulnerability that allows | |
CVE-2026-124309 |
medium | 6.9 | 0.0012 | 2026-11-07 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap out-of-bounds read vulnerability in SEIR | |
CVE-2026-124308 |
medium | 5.8 | 0.0012 | 2026-11-07 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRe | |
CVE-2026-124307 |
medium | 5.8 | 0.0012 | 2026-11-07 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability that allows | |
CVE-2026-99282 |
— | — | 0.0016 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: | |
CVE-2026-99281 |
high | 7.8 | 0.0012 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ | |
CVE-2026-99280 |
— | — | 0.0014 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session | |
CVE-2026-99279 |
— | — | 0.0012 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended | |
CVE-2026-99278 |
— | — | 0.0018 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit sessions | |
CVE-2026-99277 |
high | 7.5 | 0.0025 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connect | |
CVE-2026-99276 |
— | — | 0.0014 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer connecti | |
CVE-2026-99275 |
— | — | 0.0015 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject s | |
CVE-2026-99274 |
— | — | 0.0016 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix fiem | |
CVE-2026-99273 |
— | — | 0.0016 | 2026-11-07 | 1 PoC | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reserve space |
CVE-2026-99272 |
— | — | 0.0014 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate | |
CVE-2026-99271 |
— | — | 0.0016 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear pr | |
CVE-2026-123988 |
medium | 5.5 | 0.0038 | 2026-11-07 | A vulnerability has been found in SililaWijesinghe Food Ordering System up to ba314e897e33 | |
CVE-2024-2905 |
medium | 6.2 | 0.0033 | 2026-11-07 | A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/sha | |
CVE-2024-2698 |
high | 8.8 | 0.0067 | 2026-11-07 | A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Ke | |
CVE-2023-5236 |
medium | 6.5 | 0.0111 | 2026-11-07 | A flaw was found in Infinispan, which does not detect circular object references when unma | |
CVE-2023-5178 |
high | 8.8 | 0.0962 | 2026-11-07 | 1 PoC | A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_ |
CVE-2023-5157 |
high | 7.5 | 0.0226 | 2026-11-07 | A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a | |
CVE-2023-5115 |
medium | 6.3 | 0.0101 | 2026-11-07 | An absolute path traversal attack exists in the Ansible automation platform. This flaw all | |
CVE-2023-5088 |
high | 7.0 | 0.0026 | 2026-11-07 | A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk o | |
CVE-2023-4732 |
medium | 4.7 | 0.0018 | 2026-11-07 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Ker | |
CVE-2023-4527 |
medium | 6.5 | 0.0167 | 2026-11-07 | A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC addr | |
CVE-2023-4387 |
high | 7.1 | 0.0024 | 2026-11-07 | A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_ | |
CVE-2023-4385 |
medium | 5.5 | 0.0023 | 2026-11-07 | A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling | |
CVE-2023-4147 |
high | 7.8 | 0.0055 | 2026-11-07 | 1 PoC | A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding |
CVE-2023-4091 |
medium | 6.5 | 0.0133 | 2026-11-07 | A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate fil | |
CVE-2023-3812 |
high | 7.8 | 0.0034 | 2026-11-07 | An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver | |
CVE-2023-3773 |
medium | 4.4 | 0.0025 | 2026-11-07 | A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsyst | |
CVE-2023-3772 |
medium | 4.4 | 0.0047 | 2026-11-07 | A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsyst | |
CVE-2023-39197 |
high | 7.5 | 0.0094 | 2026-11-07 | An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) | |
CVE-2023-2593 |
medium | 5.9 | 0.0085 | 2026-11-07 | A flaw exists within the Linux kernel's handling of new TCP connections. The issue results | |
CVE-2020-27792 |
high | 7.1 | 0.0047 | 2026-11-07 | A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() | |
CVE-2026-123966 |
critical | 10.0 | 0.0102 | 2026-11-07 | A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the fu |