Browse All CVEs
50,447 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105326 |
low | 2.5 | 0.0023 | 2026-11-06 | An argument injection flaw was found in CUPS. When email notification is configured, the C | |
CVE-2025-9820 |
medium | 4.0 | 0.0022 | 2026-11-06 | A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() fun | |
CVE-2025-9640 |
medium | 4.3 | 0.0047 | 2026-11-06 | A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memor | |
CVE-2025-9615 |
low | 3.3 | 0.0016 | 2026-11-06 | A flaw was found in NetworkManager. The NetworkManager package allows access to files that | |
CVE-2025-8283 |
low | 3.7 | 0.0037 | 2026-11-06 | A vulnerability was found in the netavark package, a network stack for containers used wit | |
CVE-2025-8277 |
low | 3.1 | 0.0043 | 2026-11-06 | A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeat | |
CVE-2025-4878 |
low | 3.6 | 0.0023 | 2026-11-06 | A vulnerability was found in libssh, where an uninitialized variable exists under certain | |
CVE-2025-4476 |
medium | 4.3 | 0.0055 | 2026-11-06 | 1 PoC | A denial-of-service vulnerability has been identified in the libsoup HTTP client library. |
CVE-2025-4056 |
high | 7.5 | 0.0054 | 2026-11-06 | A flaw was found in GLib. A denial of service on Windows platforms may occur if an applica | |
CVE-2026-2243 |
medium | 5.1 | 0.0013 | 2026-11-06 | A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds re | |
CVE-2026-2239 |
medium | 6.5 | 0.0052 | 2026-11-06 | A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_st | |
CVE-2026-1485 |
low | 2.8 | 0.0016 | 2026-11-06 | A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability | |
CVE-2026-15812 |
medium | 4.8 | 0.0026 | 2026-11-06 | A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet | |
CVE-2026-15811 |
medium | 5.8 | 0.0008 | 2026-11-06 | A vulnerability was found in kronosnet's (version <=1.34) cryptographic configuration mana | |
CVE-2026-15713 |
medium | 5.9 | 0.0035 | 2026-11-06 | A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails t | |
CVE-2026-15041 |
low | 3.7 | 0.0036 | 2026-11-06 | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function | |
CVE-2026-14935 |
low | 3.7 | 0.0023 | 2026-11-06 | A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto( | |
CVE-2026-14612 |
medium | 4.2 | 0.0014 | 2026-11-06 | Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler | |
CVE-2026-11793 |
medium | 4.9 | 0.0028 | 2026-11-06 | A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function | |
CVE-2026-11792 |
low | 3.3 | 0.0026 | 2026-11-06 | A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabl | |
CVE-2026-11786 |
medium | 6.5 | 0.0016 | 2026-11-06 | A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buf | |
CVE-2026-111581 |
low | 3.3 | 0.0013 | 2026-11-06 | A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() fun | |
CVE-2026-110036 |
low | 3.3 | 0.0018 | 2026-11-06 | A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of | |
CVE-2026-10028 |
medium | 4.3 | 0.0018 | 2026-11-06 | A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by p | |
CVE-2026-109854 |
low | 2.5 | 0.0012 | 2026-11-06 | A flaw was found in m17n-lib. An attacker who supplies crafted input to an application pro | |
CVE-2026-100229 |
medium | 6.5 | 0.0030 | 2026-11-06 | Rejected reason: No standard GStreamer pipeline element invokes the vulnerable parser API. | |
CVE-2026-0992 |
low | 2.9 | 0.0046 | 2026-11-06 | A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerabil | |
CVE-2026-0989 |
low | 3.7 | 0.0053 | 2026-11-06 | A flaw was identified in the RelaxNG parser of libxml2 related to how external schema incl | |
CVE-2026-0988 |
low | 3.7 | 0.0043 | 2026-11-06 | A flaw was found in glib. Missing validation of offset and count parameters in the g_buffe | |
CVE-2026-0968 |
low | 3.1 | 0.0047 | 2026-11-06 | A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server c | |
CVE-2026-0967 |
medium | 5.5 | 0.0024 | 2026-11-06 | A flaw was found in libssh. A remote attacker, by controlling client configuration files o | |
CVE-2026-0965 |
low | 3.3 | 0.0017 | 2026-11-06 | A flaw was found in libssh where it can attempt to open arbitrary files during configurati | |
CVE-2025-6199 |
low | 3.3 | 0.0022 | 2026-11-06 | A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is e | |
CVE-2025-60019 |
low | 3.7 | 0.0036 | 2026-11-06 | glib-networking's OpenSSL backend fails to properly check the return value of memory alloc | |
CVE-2025-60018 |
medium | 4.8 | 0.0031 | 2026-11-06 | glib-networking's OpenSSL backend fails to properly check the return value of a call to BI | |
CVE-2025-5918 |
medium | 6.6 | 0.0039 | 2026-11-06 | A vulnerability has been identified in the libarchive library. This flaw can be triggered | |
CVE-2025-5917 |
medium | 5.0 | 0.0025 | 2026-11-06 | A vulnerability has been identified in the libarchive library. This flaw involves an 'off- | |
CVE-2025-5916 |
medium | 5.6 | 0.0024 | 2026-11-06 | A vulnerability has been identified in the libarchive library. This flaw involves an integ | |
CVE-2025-5915 |
medium | 6.6 | 0.0022 | 2026-11-06 | 1 PoC | A vulnerability has been identified in the libarchive library. This flaw can lead to a hea |
CVE-2026-89017 |
high | 8.7 | 0.0031 | 2026-11-06 | Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows una | |
CVE-2026-75598 |
medium | 6.3 | 0.0014 | 2026-11-06 | The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and pac | |
CVE-2026-123973 |
medium | 5.0 | 0.0011 | 2026-11-06 | SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoi | |
CVE-2026-18417 |
medium | 6.5 | 0.0018 | 2026-11-06 | The native BSD-socket layer recorded a pending asynchronous socket error by type-punning i | |
CVE-2025-9232 |
medium | 5.9 | 0.0241 | 2026-11-06 | Issue summary: An application using the OpenSSL HTTP client API functions may trigger an o | |
CVE-2025-9231 |
medium | 5.9 | 0.0160 | 2026-11-06 | Issue summary: A timing side-channel which could potentially allow remote recovery of the | |
CVE-2025-9230 |
critical | 9.8 | 0.0178 | 2026-11-06 | Issue summary: An application trying to decrypt CMS messages encrypted using password base | |
CVE-2024-12797 |
high | 7.4 | 0.0192 | 2026-11-06 | Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may f | |
CVE-2024-13176 |
medium | 4.6 | 0.0075 | 2026-11-06 | 1 PoC | Issue summary: A timing side-channel which could potentially allow recovering the private |
CVE-2024-4741 |
critical | 9.8 | 0.0328 | 2026-11-06 | Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be ac | |
CVE-2024-9143 |
high | 8.8 | 0.1248 | 2026-11-06 | Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit va |