Browse All CVEs
50,459 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-45873 |
medium | 5.5 | 0.0016 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rb | |
CVE-2026-45872 |
medium | 5.5 | 0.0017 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix m | |
CVE-2026-45871 |
medium | 5.5 | 0.0019 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix mi | |
CVE-2026-45870 |
medium | 5.5 | 0.0016 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix | |
CVE-2026-45857 |
medium | 5.5 | 0.0016 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix d | |
CVE-2026-101512 |
medium | 6.5 | 0.0034 | 2026-11-06 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that a | |
CVE-2026-101475 |
medium | 6.5 | 0.0037 | 2026-11-06 | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (com | |
CVE-2026-58141 |
high | 7.2 | 0.0040 | 2026-11-06 | Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any au | |
CVE-2026-12067 |
medium | 6.5 | 0.0031 | 2026-11-06 | Missing exception handlers in AvastSvc native message dispatcher (ashServ.dll) on Windows | |
CVE-2026-123675 |
medium | 5.5 | 0.0047 | 2026-11-06 | A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c | |
CVE-2026-123623 |
high | 8.2 | 0.0039 | 2026-11-06 | Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-prev | |
CVE-2026-121881 |
medium | 5.7 | 0.0027 | 2026-11-06 | SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit So | |
CVE-2026-121880 |
medium | 4.7 | 0.0025 | 2026-11-06 | Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) | |
CVE-2026-31583 |
high | 7.8 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix us | |
CVE-2026-123792 |
high | 8.7 | 0.0050 | 2026-11-06 | The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so | |
CVE-2026-21834 |
low | 3.1 | 0.0015 | 2026-11-06 | HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security r | |
CVE-2026-53980 |
high | 8.6 | 0.0042 | 2026-11-06 | Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middlew | |
CVE-2026-123786 |
high | 8.4 | 0.0022 | 2026-11-06 | Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows wor | |
CVE-2026-123785 |
medium | 6.8 | 0.0016 | 2026-11-06 | Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src | |
CVE-2026-123784 |
high | 8.5 | 0.0071 | 2026-11-06 | Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfi | |
CVE-2026-123783 |
high | 8.7 | 0.0056 | 2026-11-06 | Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated u | |
CVE-2026-123782 |
medium | 5.3 | 0.0024 | 2026-11-06 | ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability in SaveF | |
CVE-2026-123624 |
medium | 5.3 | 0.0030 | 2026-11-06 | ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability that all | |
CVE-2026-123622 |
medium | 5.1 | 0.0026 | 2026-11-06 | Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi | |
CVE-2026-123621 |
high | 8.6 | 0.0098 | 2026-11-06 | Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi tha | |
CVE-2026-123620 |
high | 7.7 | 0.0138 | 2026-11-06 | Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail modu | |
CVE-2026-123619 |
medium | 5.9 | 0.0047 | 2026-11-06 | Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in th | |
CVE-2026-123618 |
high | 7.6 | 0.0032 | 2026-11-06 | 1 PoC | ABP Framework before 10.7.1 contains an authentication bypass vulnerability that skips acc |
CVE-2026-123617 |
medium | 6.9 | 0.0040 | 2026-11-06 | Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticate | |
CVE-2026-123492 |
medium | 6.9 | 0.0027 | 2026-11-06 | SiYuan before 3.8.9 contains a nil pointer dereference vulnerability in privateCacheMiddle | |
CVE-2026-123491 |
high | 8.8 | 0.0029 | 2026-11-06 | Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerabil | |
CVE-2026-123490 |
high | 8.7 | 0.0031 | 2026-11-06 | Craft CMS from 5.8.17 before 5.11.2 contains a privilege escalation vulnerability because | |
CVE-2026-123489 |
high | 7.1 | 0.0024 | 2026-11-06 | Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulne | |
CVE-2026-123488 |
critical | 9.3 | 0.0186 | 2026-11-06 | 4 PoC | Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL inje |
CVE-2026-123487 |
high | 8.7 | 0.0038 | 2026-11-06 | Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address f | |
CVE-2026-123486 |
medium | 6.0 | 0.0017 | 2026-11-06 | WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYP | |
CVE-2026-123485 |
high | 7.1 | 0.0033 | 2026-11-06 | Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.I | |
CVE-2026-112341 |
high | 7.1 | 0.0024 | 2026-11-06 | Wazuh versions from 4.0.0 before 4.14.9 contain a sql injection vulnerability in WazuhDBBa | |
CVE-2026-112340 |
high | 8.8 | 0.0035 | 2026-11-06 | Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerabi | |
CVE-2026-112339 |
high | 8.2 | 0.0017 | 2026-11-06 | Wazuh from 3.9.0 before 4.14.9 contains a missing TLS hostname verification vulnerability | |
CVE-2026-112338 |
high | 8.2 | 0.0040 | 2026-11-06 | Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the | |
CVE-2026-112337 |
medium | 6.3 | 0.0021 | 2026-11-06 | Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the | |
CVE-2026-112336 |
high | 7.1 | 0.0056 | 2026-11-06 | Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic | |
CVE-2026-112335 |
medium | 6.8 | 0.0013 | 2026-11-06 | Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcoll | |
CVE-2026-112334 |
medium | 6.9 | 0.0056 | 2026-11-06 | Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-exec | |
CVE-2024-5742 |
medium | 6.7 | 0.0034 | 2026-11-06 | A vulnerability was found in GNU Nano that allows a possible privilege escalation through | |
CVE-2024-49395 |
medium | 5.3 | 0.0031 | 2026-11-06 | In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may lea | |
CVE-2024-49394 |
medium | 5.3 | 0.0032 | 2026-11-06 | In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic s | |
CVE-2026-123664 |
low | 2.1 | 0.0024 | 2026-11-06 | A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981 | |
CVE-2026-87045 |
high | 7.5 | 0.0038 | 2026-11-06 | The HTTP/2 server in subsys/net/lib/http/http_server_http2.c clears the connection's strea |