Browse All CVEs
50,446 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-59842 |
medium | 5.3 | 0.0049 | 2026-11-06 | A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curv | |
CVE-2026-120484 |
— | — | — | 2026-11-06 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-11916 | |
CVE-2026-109683 |
medium | 5.3 | 0.0031 | 2026-11-06 | A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that | |
CVE-2026-77709 |
medium | 5.9 | 0.0066 | 2026-11-06 | A pre-authentication heap-based buffer overflow vulnerability has been identified in the S | |
CVE-2026-77708 |
medium | 5.9 | 0.0066 | 2026-11-06 | A pre-authentication stack-based buffer overflow vulnerability has been identified in the | |
CVE-2026-19868 |
high | 7.5 | 0.0053 | 2026-11-06 | KEV 2 PoC | SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that |
CVE-2026-19703 |
medium | 5.1 | 0.0019 | 2026-11-06 | A weak password hashing vulnerability has been identified on SonicOS virtual appliances, w | |
CVE-2026-123998 |
high | 7.2 | 0.0023 | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulne | |
CVE-2026-123997 |
high | 7.1 | 0.0018 | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-s | |
CVE-2026-123996 |
medium | 4.8 | 0.0016 | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulne | |
CVE-2026-123995 |
medium | 4.8 | 0.0013 | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerabil | |
CVE-2026-101517 |
medium | 5.5 | 0.0014 | 2026-11-06 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilitie | |
CVE-2026-62438 |
medium | 6.1 | 0.0012 | 2026-11-06 | A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially d | |
CVE-2026-6426 |
medium | 4.4 | 0.0039 | 2026-11-06 | A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handlin | |
CVE-2026-61477 |
low | 2.3 | 0.0016 | 2026-11-06 | An injection vulnerability was found in libvirt's virtual network driver. The network XML | |
CVE-2026-55654 |
low | 3.7 | 0.0065 | 2026-11-06 | A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during | |
CVE-2026-108262 |
medium | 6.5 | 0.0031 | 2026-11-06 | DDEV is an open-source tool for running local web development environments for PHP and Nod | |
CVE-2026-3632 |
medium | 5.5 | 0.0025 | 2026-11-06 | A flaw was found in libsoup, a library used by applications to send network requests. This | |
CVE-2026-90975 |
high | 7.8 | 0.0014 | 2026-11-06 | A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged | |
CVE-2026-123357 |
none | — | 0.0026 | 2026-11-06 | GROBID is machine learning software for extracting information from scholarly documents. P | |
CVE-2026-123356 |
high | 7.5 | 0.0035 | 2026-11-06 | GROBID is machine learning software for extracting information from scholarly documents. P | |
CVE-2026-122113 |
medium | 4.3 | 0.0013 | 2026-11-06 | A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present att | |
CVE-2026-119923 |
critical | 9.3 | 0.0062 | 2026-11-06 | A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL ex | |
CVE-2026-44605 |
medium | 5.5 | 0.0018 | 2026-11-06 | A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a hea | |
CVE-2026-49126 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-49125 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-49124 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-49123 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-49122 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-47404 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-47403 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-47402 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-47401 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-47400 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-119924 |
high | 7.2 | 0.0052 | 2026-11-06 | An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL | |
CVE-2026-10147 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-10146 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-56717 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-107155 |
high | 8.8 | 0.0075 | 2026-11-06 | A permissive cross-domain policy vulnerability has been identified in the SonicOS manageme | |
CVE-2026-82308 |
high | 7.5 | 0.0060 | 2026-11-06 | A pre-authentication heap-based buffer overflow vulnerability has been identified in the S | |
CVE-2026-123994 |
medium | 5.3 | 0.0020 | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vuln | |
CVE-2026-123993 |
high | 8.7 | 0.0023 | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vuln | |
CVE-2026-107154 |
high | 8.8 | 0.0069 | 2026-11-06 | A session validation vulnerability has been identified in the SonicOS management interface | |
CVE-2026-3295 |
medium | 5.4 | 0.0018 | 2026-11-06 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web a | |
CVE-2023-38375 |
medium | 6.1 | 0.0019 | 2026-11-06 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vuln | |
CVE-2026-92899 |
medium | 4.8 | 0.0051 | 2026-11-06 | Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token can | |
CVE-2026-2443 |
medium | 5.3 | 0.0049 | 2026-11-06 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When | |
CVE-2026-1801 |
medium | 6.5 | 0.0042 | 2026-11-06 | 1 PoC | A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vu |
CVE-2026-19411 |
low | 3.9 | 0.0013 | 2026-11-06 | A NULL pointer vulnerability has been found in the the shim application of dp.c library. A | |
CVE-2026-18839 |
low | 2.2 | 0.0013 | 2026-11-06 | An integer underflow was found in the popt library when formatting help text for option ta |