Browse All CVEs
50,446 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18743 |
low | 2.5 | 0.0014 | 2026-11-06 | A flaw was found in popt. This vulnerability allows an attacker to provide specially craft | |
CVE-2026-18739 |
low | 2.5 | 0.0014 | 2026-11-06 | A flaw was found in popt, a command-line option parsing library. An off-by-one error in th | |
CVE-2026-18103 |
medium | 4.9 | 0.0089 | 2026-11-06 | A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open | |
CVE-2026-18090 |
medium | 6.1 | 0.0023 | 2026-11-06 | A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a hea | |
CVE-2026-17591 |
low | 3.6 | 0.0015 | 2026-11-06 | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potenti | |
CVE-2026-17072 |
low | 3.3 | 0.0012 | 2026-11-06 | A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 byt | |
CVE-2026-17039 |
low | 3.1 | 0.0026 | 2026-11-06 | A flaw was found in pki-core. The certificate authority (CA) renewal request path does not | |
CVE-2024-58388 |
— | — | 0.0081 | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-71495 |
critical | 10.0 | 0.0034 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20. | |
CVE-2026-62346 |
high | 7.6 | 0.0025 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19. | |
CVE-2026-62345 |
high | 7.6 | 0.0026 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19. | |
CVE-2025-64798 |
— | — | — | 2026-11-06 | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during t | |
CVE-2025-46896 |
— | — | — | 2026-11-06 | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during t | |
CVE-2024-36240 |
— | — | — | 2026-11-06 | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during t | |
CVE-2026-3184 |
medium | 5.3 | 0.0044 | 2026-11-06 | A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utili | |
CVE-2026-28295 |
medium | 4.3 | 0.0022 | 2026-11-06 | A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerab | |
CVE-2026-111229 |
— | — | 0.0637 | 2026-11-06 | Rejected reason: This CVE ID has been rejected because it does not describe a security vul | |
CVE-2026-84473 |
critical | 9.8 | 0.0052 | 2026-11-06 | 1 PoC | Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud o |
CVE-2026-100082 |
— | — | 0.0024 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UA | |
CVE-2026-100081 |
high | 7.8 | 0.0017 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xe | |
CVE-2026-100080 |
— | — | 0.0027 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF | |
CVE-2026-62344 |
high | 7.5 | 0.0028 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19. | |
CVE-2026-123976 |
medium | 6.8 | 0.0012 | 2026-11-06 | EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() t | |
CVE-2026-8355 |
medium | 5.4 | 0.0022 | 2026-11-06 | IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Fo | |
CVE-2026-4418 |
medium | 5.4 | 0.0018 | 2026-11-06 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely auth | |
CVE-2026-12969 |
medium | 5.3 | 0.0026 | 2026-11-06 | An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035 | |
CVE-2026-12528 |
medium | 5.4 | 0.0023 | 2026-11-06 | A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of acl | |
CVE-2026-35549 |
medium | 6.5 | 0.0027 | 2026-11-06 | An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11. | |
CVE-2026-17614 |
medium | 4.4 | 0.0122 | 2026-11-06 | A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRe | |
CVE-2026-102359 |
high | 7.5 | 0.0043 | 2026-11-06 | Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz | |
CVE-2026-101606 |
medium | 6.5 | 0.0026 | 2026-11-06 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracl | |
CVE-2026-101605 |
medium | 5.3 | 0.0032 | 2026-11-06 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilitie | |
CVE-2026-101601 |
medium | 5.5 | 0.0013 | 2026-11-06 | Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions | |
CVE-2026-101600 |
low | 3.6 | 0.0008 | 2026-11-06 | Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported | |
CVE-2026-101599 |
high | 7.5 | 0.0011 | 2026-11-06 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-101598 |
high | 7.8 | 0.0014 | 2026-11-06 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | |
CVE-2026-101595 |
medium | 5.4 | 0.0011 | 2026-11-06 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac | |
CVE-2026-101592 |
medium | 5.4 | 0.0019 | 2026-11-06 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac | |
CVE-2026-101591 |
medium | 4.3 | 0.0028 | 2026-11-06 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac | |
CVE-2026-101589 |
medium | 5.3 | 0.0030 | 2026-11-06 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilitie | |
CVE-2026-101586 |
medium | 5.3 | 0.0024 | 2026-11-06 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webcl | |
CVE-2026-101585 |
high | 7.2 | 0.0021 | 2026-11-06 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors) | |
CVE-2026-123876 |
medium | 4.4 | 0.0015 | 2026-11-06 | A flaw was found in the default seccomp profile used by Podman via containers-common. Deny | |
CVE-2026-102650 |
high | 7.5 | 0.0035 | 2026-11-06 | Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue comp | |
CVE-2026-102356 |
medium | 5.0 | 0.0023 | 2026-11-06 | Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional M | |
CVE-2026-119758 |
high | 7.1 | 0.0045 | 2026-11-06 | ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path | |
CVE-2026-118670 |
high | 8.8 | 0.0042 | 2026-11-06 | OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages. From 3.5.0-b | |
CVE-2026-107170 |
low | 2.9 | 0.0010 | 2026-11-06 | A flaw was found in m17n-lib. A partial failure during library initialization can leave an | |
CVE-2026-105460 |
medium | 5.5 | 0.0012 | 2026-11-06 | A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetoo | |
CVE-2026-105326 |
low | 2.5 | 0.0023 | 2026-11-06 | An argument injection flaw was found in CUPS. When email notification is configured, the C |