Browse All CVEs
50,460 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-87045 |
high | 7.5 | 0.0038 | 2026-11-06 | The HTTP/2 server in subsys/net/lib/http/http_server_http2.c clears the connection's strea | |
CVE-2026-123339 |
low | 2.3 | 0.0023 | 2026-11-06 | Improper trust of forwarded headers in RouterListener::onKernelFinishRequest() in Symfony | |
CVE-2025-14821 |
high | 7.0 | 0.0014 | 2026-11-06 | A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, sec | |
CVE-2025-13763 |
medium | 5.7 | 0.0027 | 2026-11-06 | Multiple uses of uninitialized variables were found in libopensc that may lead to informat | |
CVE-2025-11731 |
low | 3.1 | 0.0028 | 2026-11-06 | A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <fu | |
CVE-2024-45620 |
low | 3.9 | 0.0032 | 2026-11-06 | A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a craft | |
CVE-2024-45619 |
medium | 4.3 | 0.0032 | 2026-11-06 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An | |
CVE-2024-45618 |
low | 3.9 | 0.0031 | 2026-11-06 | A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB De | |
CVE-2024-45617 |
low | 3.9 | 0.0033 | 2026-11-06 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An | |
CVE-2024-45616 |
low | 3.9 | 0.0036 | 2026-11-06 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An | |
CVE-2024-45615 |
low | 3.9 | 0.0036 | 2026-11-06 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. T | |
CVE-2026-123665 |
low | 2.4 | 0.0010 | 2026-11-06 | A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWrit | |
CVE-2025-3416 |
low | 3.7 | 0.0053 | 2026-11-06 | A flaw was found in OpenSSL's handling of the properties argument in certain functions. Th | |
CVE-2025-3360 |
low | 3.7 | 0.0066 | 2026-11-06 | A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a l | |
CVE-2026-119170 |
high | 8.2 | 0.0049 | 2026-11-06 | There was a regression in how FIPS algorithms were enforced for the hashlib module. Only u | |
CVE-2024-8612 |
low | 3.8 | 0.0020 | 2026-11-06 | A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The s | |
CVE-2024-8443 |
low | 2.9 | 0.0035 | 2026-11-06 | A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A cr | |
CVE-2024-8354 |
medium | 5.5 | 0.0029 | 2026-11-06 | A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in | |
CVE-2026-64894 |
high | 7.3 | 0.0011 | 2026-11-06 | Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls | |
CVE-2026-118514 |
medium | 6.3 | 0.0061 | 2026-11-06 | In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\C | |
CVE-2026-113618 |
medium | 5.3 | 0.0013 | 2026-11-06 | The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate | |
CVE-2026-106022 |
high | 8.6 | 0.0008 | 2026-11-06 | Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Eas | |
CVE-2026-106020 |
high | 8.6 | 0.0013 | 2026-11-06 | Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls | |
CVE-2026-59105 |
critical | 9.3 | 0.0144 | 2026-11-06 | Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_ | |
CVE-2024-4029 |
medium | 4.1 | 0.0028 | 2026-11-06 | A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation | |
CVE-2026-106019 |
high | 8.8 | 0.0017 | 2026-11-06 | Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE | |
CVE-2024-3653 |
medium | 5.3 | 0.0187 | 2026-11-06 | A vulnerability was found in Undertow. This issue requires enabling the learning-push hand | |
CVE-2026-35110 |
medium | 5.4 | 0.0009 | 2026-11-06 | HCL AION is affected by a vulnerability where encrypted (HTTPS) communication was not enfo | |
CVE-2026-35109 |
low | 3.7 | 0.0023 | 2026-11-06 | HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by t | |
CVE-2026-123653 |
low | 2.1 | 0.0022 | 2026-11-06 | A security vulnerability has been detected in esengine DeepSeek-Reasonix up to 2.52.0. Aff | |
CVE-2026-35106 |
medium | 4.7 | 0.0032 | 2026-11-06 | HCL AION is affected by an open redirect vulnerability in the session-handling logic of th | |
CVE-2026-35105 |
medium | 4.7 | 0.0032 | 2026-11-06 | HCL AION is affected by an open redirect vulnerability in the session-handling logic of th | |
CVE-2026-35104 |
medium | 4.7 | 0.0023 | 2026-11-06 | HCL AION is affected by an open redirect vulnerability on the user registration page (Sign | |
CVE-2026-35103 |
medium | 4.7 | 0.0023 | 2026-11-06 | HCL AION is affected by an open redirect vulnerability on the role assignment pending page | |
CVE-2026-35102 |
medium | 4.7 | 0.0031 | 2026-11-06 | HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI | |
CVE-2024-1454 |
low | 3.4 | 0.0042 | 2026-11-06 | The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occ | |
CVE-2024-0564 |
medium | 6.5 | 0.0062 | 2026-11-06 | A flaw was found in the Linux kernel's memory deduplication mechanism. The max page sharin | |
CVE-2024-0232 |
medium | 5.5 | 0.0038 | 2026-11-06 | A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() f | |
CVE-2024-0217 |
low | 3.3 | 0.0023 | 2026-11-06 | A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup m | |
CVE-2023-7216 |
medium | 5.3 | 0.0090 | 2026-11-06 | A path traversal vulnerability was found in the CPIO utility. This issue could allow a rem | |
CVE-2023-7042 |
medium | 5.5 | 0.0028 | 2026-11-06 | A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl | |
CVE-2023-6918 |
medium | 5.3 | 0.0141 | 2026-11-06 | A flaw was found in the libssh implements abstract layer for message digest (MD) operation | |
CVE-2023-6710 |
medium | 5.4 | 0.0226 | 2026-11-06 | 2 PoC | A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a mal |
CVE-2023-6679 |
medium | 5.5 | 0.0031 | 2026-11-06 | A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers | |
CVE-2023-6228 |
low | 3.3 | 0.0040 | 2026-11-06 | An issue was found in the tiffcp utility distributed by the libtiff package where a crafte | |
CVE-2023-6176 |
medium | 4.7 | 0.0025 | 2026-11-06 | A null pointer dereference flaw was found in the Linux kernel API for the cryptographic al | |
CVE-2023-6121 |
medium | 4.3 | 0.0164 | 2026-11-06 | An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux ke | |
CVE-2023-6004 |
medium | 4.8 | 0.0045 | 2026-11-06 | A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can | |
CVE-2023-5870 |
medium | 4.4 | 0.0255 | 2026-11-06 | A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals backgroun | |
CVE-2026-5345 |
low | 3.7 | 0.0009 | 2026-11-06 | HCL AION is affected by a missing encryption vulnerability in a second WebSocket connectio |