Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-121837 |
medium | 4.3 | 0.0017 | 2026-11-06 | A flaw was found in the REST Data Panache component of Quarkus. When a security constraint | |
CVE-2026-114366 |
low | 2.3 | 0.0039 | 2026-11-06 | An information disclosure vulnerability in the Qt Framework QWebSocket authentication hand | |
CVE-2026-119433 |
high | 7.7 | 0.0034 | 2026-11-06 | A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint | |
CVE-2026-119432 |
high | 8.7 | 0.0032 | 2026-11-06 | A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file sha | |
CVE-2026-119431 |
high | 7.7 | 0.0034 | 2026-11-06 | A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload | |
CVE-2026-89142 |
medium | 6.3 | 0.0022 | 2026-11-06 | In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds ch | |
CVE-2026-97029 |
medium | 5.7 | 0.0024 | 2026-11-06 | Flatpak's process ID namespace separation does not prevent a sandboxed app's kill(0, signa | |
CVE-2026-96545 |
medium | 4.4 | 0.0023 | 2026-11-06 | An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a | |
CVE-2026-96281 |
medium | 6.2 | 0.0012 | 2026-11-06 | On a multi-user system, a user with an active local login session could downgrade a system | |
CVE-2026-96279 |
medium | 6.5 | 0.0043 | 2026-11-06 | A malicious OCI registry can hardlink arbitrary host files into the extraction directory w | |
CVE-2026-96276 |
medium | 6.5 | 0.0044 | 2026-11-06 | If a malicious SDK container declares an extension point with a crafted `directory` path, | |
CVE-2026-95520 |
high | 7.1 | 0.0016 | 2026-11-06 | A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untruste | |
CVE-2026-95512 |
medium | 5.5 | 0.0018 | 2026-11-06 | A flaw was found in FreeType, specifically within its CID font loader. A remote attacker c | |
CVE-2026-93433 |
medium | 5.5 | 0.0015 | 2026-11-06 | A flaw was found in libstoragemgmt. An attacker with control over a local or virtual stora | |
CVE-2026-94184 |
medium | 5.3 | 0.0120 | 2026-11-06 | A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A | |
CVE-2026-93653 |
medium | 5.5 | 0.0015 | 2026-11-06 | A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling- | |
CVE-2026-77299 |
high | 7.5 | 0.0035 | 2026-11-06 | Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compi | |
CVE-2026-9150 |
medium | 6.5 | 0.0041 | 2026-11-06 | A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libs | |
CVE-2026-9149 |
medium | 6.5 | 0.0031 | 2026-11-06 | A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim | |
CVE-2026-91786 |
medium | 6.1 | 0.0013 | 2026-11-06 | A flaw was found in GNOME Shell. When processing icons from a remote search provider via D | |
CVE-2026-91205 |
medium | 6.0 | 0.0011 | 2026-11-06 | A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condit | |
CVE-2026-91203 |
medium | 6.0 | 0.0016 | 2026-11-06 | A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a | |
CVE-2026-91202 |
medium | 6.1 | 0.0016 | 2026-11-06 | A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerabil | |
CVE-2026-90996 |
medium | 5.5 | 0.0013 | 2026-11-06 | A flaw was found in sssd. A local unprivileged user could send a specially crafted request | |
CVE-2026-90995 |
medium | 5.5 | 0.0014 | 2026-11-06 | A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileg | |
CVE-2026-90994 |
medium | 4.0 | 0.0017 | 2026-11-06 | A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) r | |
CVE-2026-90462 |
medium | 5.4 | 0.0018 | 2026-11-06 | A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_o | |
CVE-2026-92821 |
medium | 6.8 | 0.0031 | 2026-11-06 | A flaw was found in SSSD. When configured to evaluate password expiration warnings before | |
CVE-2026-92382 |
medium | 4.1 | 0.0014 | 2026-11-06 | An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with | |
CVE-2026-92091 |
medium | 5.9 | 0.0068 | 2026-11-06 | A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK memb | |
CVE-2026-84232 |
medium | 5.4 | 0.0024 | 2026-11-06 | A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-ty | |
CVE-2026-89329 |
medium | 6.2 | 0.0016 | 2026-11-06 | A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX co | |
CVE-2026-89098 |
medium | 5.5 | 0.0015 | 2026-11-06 | A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its | |
CVE-2026-89096 |
medium | 5.9 | 0.0031 | 2026-11-06 | A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of | |
CVE-2026-89088 |
medium | 5.5 | 0.0022 | 2026-11-06 | A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system | |
CVE-2026-89085 |
medium | 6.6 | 0.0021 | 2026-11-06 | A flaw was found in parted. A heap-based buffer overflow can occur when processing a speci | |
CVE-2026-88914 |
medium | 4.4 | 0.0012 | 2026-11-06 | A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a speciall | |
CVE-2026-88859 |
medium | 6.3 | 0.0040 | 2026-11-06 | A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending | |
CVE-2026-88265 |
medium | 5.6 | 0.0012 | 2026-11-06 | A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a sym | |
CVE-2026-88264 |
medium | 5.6 | 0.0012 | 2026-11-06 | A flaw was found in crun. When the container configuration does not give /dev a dedicated | |
CVE-2026-88252 |
medium | 5.5 | 0.0013 | 2026-11-06 | A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting t | |
CVE-2026-87875 |
medium | 4.3 | 0.0039 | 2026-11-06 | The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and | |
CVE-2026-85977 |
medium | 5.3 | 0.0042 | 2026-11-06 | A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending | |
CVE-2026-86345 |
critical | 9.0 | 0.0038 | 2026-11-06 | A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffe | |
CVE-2026-84720 |
medium | 6.5 | 0.0027 | 2026-11-06 | A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJob | |
CVE-2026-84718 |
medium | 4.3 | 0.0014 | 2026-11-06 | A flaw was found in the Ansible Automation Platform automation-controller. In the shipped | |
CVE-2026-84717 |
medium | 5.3 | 0.0034 | 2026-11-06 | A flaw was found in the Ansible Automation Platform automation-controller. The unauthentic | |
CVE-2026-84716 |
medium | 6.6 | 0.0018 | 2026-11-06 | A flaw was found in the automation-controller instance install-bundle en | |
CVE-2026-84712 |
medium | 5.3 | 0.0039 | 2026-11-06 | A flaw was found in the automation-controller API. The unauthenticated h | |
CVE-2026-84499 |
high | 7.7 | 0.0038 | 2026-11-06 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey q |