Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85234 |
high | 7.5 | 0.0049 | 2026-11-06 | A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap | |
CVE-2026-85013 |
high | 7.3 | 0.0024 | 2026-11-06 | A flaw was found in environment-modules. A local attacker can exploit this vulnerability b | |
CVE-2026-84828 |
medium | 6.5 | 0.0014 | 2026-11-06 | A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership | |
CVE-2026-85769 |
medium | 6.5 | 0.0042 | 2026-11-06 | 1 PoC | A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When rest |
CVE-2026-85534 |
medium | 5.9 | 0.0032 | 2026-11-06 | A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollabl | |
CVE-2026-84185 |
medium | 5.9 | 0.0013 | 2026-11-06 | A flaw was found in the jwcrypto library, which is used for implementing Javascript Object | |
CVE-2026-85150 |
high | 7.5 | 0.0053 | 2026-11-06 | A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnera | |
CVE-2026-84470 |
medium | 6.4 | 0.0030 | 2026-11-06 | A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Jo | |
CVE-2026-84270 |
medium | 4.3 | 0.0015 | 2026-11-06 | A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device | |
CVE-2026-84269 |
medium | 6.5 | 0.0030 | 2026-11-06 | A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server | |
CVE-2026-84267 |
medium | 4.3 | 0.0021 | 2026-11-06 | A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP serv | |
CVE-2026-82343 |
medium | 6.1 | 0.0018 | 2026-11-06 | A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD i | |
CVE-2026-82330 |
medium | 6.1 | 0.0026 | 2026-11-06 | A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR i | |
CVE-2026-82328 |
medium | 6.1 | 0.0018 | 2026-11-06 | A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO i | |
CVE-2026-82327 |
medium | 5.5 | 0.0016 | 2026-11-06 | A flaw was found in libsolv, a dependency-resolution library used by RPM-based package man | |
CVE-2026-82324 |
medium | 6.1 | 0.0019 | 2026-11-06 | A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially cr | |
CVE-2026-81893 |
medium | 4.7 | 0.0015 | 2026-11-06 | A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chu | |
CVE-2026-94449 |
high | 7.5 | 0.0105 | 2026-11-06 | A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to prov | |
CVE-2026-63774 |
critical | 9.4 | 0.0030 | 2026-11-06 | Insufficient input validation in the PowerSYSTEM Center report designer allows an authenti | |
CVE-2026-63017 |
critical | 9.4 | 0.0027 | 2026-11-06 | Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user | |
CVE-2026-123269 |
low | 1.9 | 0.0011 | 2026-11-06 | A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the func | |
CVE-2025-71458 |
high | 8.7 | 0.0040 | 2026-11-06 | FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an | |
CVE-2026-77680 |
medium | 5.3 | 0.0050 | 2026-11-06 | 1 PoC | An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persi |
CVE-2026-77159 |
medium | 5.5 | 0.0016 | 2026-11-06 | A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The | |
CVE-2026-76925 |
medium | 5.8 | 0.0010 | 2026-11-06 | A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists | |
CVE-2026-75900 |
medium | 6.1 | 0.0011 | 2026-11-06 | An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() functio | |
CVE-2026-75032 |
medium | 6.3 | 0.0024 | 2026-11-06 | A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderIte | |
CVE-2026-74859 |
medium | 6.8 | 0.0017 | 2026-11-06 | The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without vali | |
CVE-2026-107492 |
— | — | — | 2026-11-06 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-80179 |
medium | 5.9 | 0.0030 | 2026-11-06 | A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encr | |
CVE-2026-80101 |
medium | 4.4 | 0.0023 | 2026-11-06 | A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD i | |
CVE-2026-80048 |
medium | 5.5 | 0.0018 | 2026-11-06 | A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` | |
CVE-2026-79902 |
medium | 5.5 | 0.0027 | 2026-11-06 | A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially craf | |
CVE-2026-79717 |
medium | 6.4 | 0.0037 | 2026-11-06 | A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Gal | |
CVE-2026-78701 |
medium | 6.5 | 0.0078 | 2026-11-06 | A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerab | |
CVE-2026-78475 |
medium | 6.1 | 0.0026 | 2026-11-06 | A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted | |
CVE-2026-78323 |
medium | 6.5 | 0.0018 | 2026-11-06 | A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verif | |
CVE-2026-78322 |
medium | 6.5 | 0.0033 | 2026-11-06 | A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive | |
CVE-2026-123268 |
low | 2.0 | 0.0024 | 2026-11-06 | A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1d | |
CVE-2026-48755 |
critical | 9.9 | 0.0078 | 2026-11-06 | Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper | |
CVE-2026-48769 |
critical | 9.9 | 0.0078 | 2026-11-06 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitr | |
CVE-2026-48752 |
critical | 9.9 | 0.0078 | 2026-11-05 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, a special | |
CVE-2026-48749 |
critical | 9.9 | 0.0078 | 2026-11-05 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, a special | |
CVE-2026-85068 |
low | 2.4 | 0.0015 | 2026-11-05 | Network UPS Tools is a collection of programs which provide a common interface for monitor | |
CVE-2026-73585 |
medium | 6.3 | 0.0014 | 2026-11-05 | A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider regi | |
CVE-2026-73584 |
medium | 6.3 | 0.0013 | 2026-11-05 | A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condit | |
CVE-2026-73583 |
medium | 6.6 | 0.0013 | 2026-11-05 | A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an | |
CVE-2025-63604 |
medium | 6.5 | 0.0037 | 2026-11-05 | A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 t | |
CVE-2025-60833 |
medium | 6.5 | 0.0035 | 2026-11-05 | An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mal | |
CVE-2025-60314 |
medium | 5.4 | 0.0026 | 2026-11-05 | Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting |