Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-71220 |
high | 7.0 | 0.0013 | 2026-11-05 | A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_he | |
CVE-2026-71219 |
medium | 4.7 | 0.0011 | 2026-11-05 | A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in m | |
CVE-2026-71218 |
medium | 5.3 | 0.0038 | 2026-11-05 | A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability | |
CVE-2026-70368 |
medium | 6.5 | 0.0035 | 2026-11-05 | A stack-based out-of-bounds read vulnerability exists in the "s_vlog" function of stunnel, | |
CVE-2026-70367 |
medium | 5.4 | 0.0022 | 2026-11-05 | A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and low | |
CVE-2026-68743 |
high | 7.1 | 0.0013 | 2026-11-05 | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not | |
CVE-2026-68742 |
medium | 5.5 | 0.0013 | 2026-11-05 | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder | |
CVE-2026-113663 |
high | 8.8 | 0.0035 | 2026-11-05 | AG2 is an open-source AgentOS. From 0.13.2 until ag2 1.1.1, and from autogen 0.13.2 to 0.1 | |
CVE-2026-66759 |
high | 7.1 | 0.0031 | 2026-11-05 | A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during | |
CVE-2026-66757 |
medium | 5.5 | 0.0023 | 2026-11-05 | A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI ima | |
CVE-2026-66339 |
medium | 6.5 | 0.0025 | 2026-11-05 | A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, | |
CVE-2026-66337 |
medium | 6.5 | 0.0025 | 2026-11-05 | A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream | |
CVE-2026-59843 |
medium | 6.5 | 0.0057 | 2026-11-05 | A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packe | |
CVE-2026-59089 |
medium | 5.5 | 0.0032 | 2026-11-05 | A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation | |
CVE-2026-59088 |
medium | 5.5 | 0.0033 | 2026-11-05 | A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` | |
CVE-2026-58381 |
high | 7.3 | 0.0029 | 2026-11-05 | A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the r | |
CVE-2026-58224 |
medium | 6.5 | 0.0034 | 2026-11-05 | A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficie | |
CVE-2026-57966 |
medium | 4.4 | 0.0013 | 2026-11-05 | A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or | |
CVE-2026-57965 |
medium | 5.1 | 0.0011 | 2026-11-05 | A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an in | |
CVE-2026-88984 |
high | 7.2 | 0.0031 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-88980 |
high | 8.6 | 0.0059 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-88979 |
medium | 5.8 | 0.0023 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-16579 |
— | — | — | 2026-11-05 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-88981 |
high | 8.6 | 0.0028 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-77596 |
critical | 9.6 | 0.0025 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-88986 |
medium | 6.1 | 0.0028 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-88985 |
medium | 6.5 | 0.0026 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-88983 |
medium | 5.0 | 0.0020 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-58273 |
high | 8.1 | 0.0056 | 2026-11-05 | Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41. | |
CVE-2026-122267 |
high | 8.8 | 0.0020 | 2026-11-05 | MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz | |
CVE-2026-112908 |
medium | 5.3 | 0.0012 | 2026-11-05 | filelock is a platform-independent file lock for Python. From version 3.30.0 until version | |
CVE-2026-111495 |
medium | 5.1 | 0.0010 | 2026-11-05 | API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which | |
CVE-2026-111494 |
critical | 9.1 | 0.0016 | 2026-11-05 | Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManag | |
CVE-2026-111493 |
high | 8.7 | 0.0048 | 2026-11-05 | Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which | |
CVE-2026-48750 |
critical | 9.9 | 0.0078 | 2026-11-05 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `reco | |
CVE-2026-6695 |
medium | 5.5 | 0.0034 | 2026-11-05 | A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into ope | |
CVE-2026-6694 |
medium | 5.5 | 0.0020 | 2026-11-05 | A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting | |
CVE-2026-64611 |
high | 7.5 | 0.0063 | 2026-11-05 | A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an | |
CVE-2025-55471 |
high | 7.5 | 0.0037 | 2026-11-05 | Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows att | |
CVE-2025-63783 |
high | 7.6 | 0.0031 | 2026-11-05 | A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC projec | |
CVE-2025-63589 |
high | 7.1 | 0.0036 | 2026-11-05 | 1 PoC | A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-c |
CVE-2025-63416 |
critical | 9.1 | 0.0039 | 2026-11-05 | ** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the | |
CVE-2025-63294 |
medium | 6.5 | 0.0032 | 2026-11-05 | WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An | |
CVE-2025-63441 |
high | 7.3 | 0.0029 | 2026-11-05 | 1 PoC | Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the |
CVE-2025-60503 |
high | 8.7 | 0.0041 | 2026-11-05 | 1 PoC | A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultim |
CVE-2025-63442 |
medium | 4.6 | 0.0021 | 2026-11-05 | Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (X | |
CVE-2025-63423 |
high | 7.5 | 0.0031 | 2026-11-05 | Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to | |
CVE-2025-61141 |
high | 7.5 | 0.0109 | 2026-11-05 | sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because t | |
CVE-2025-61117 |
high | 7.5 | 0.0034 | 2026-11-05 | Senza: Keto & Fasting Android App version 2.10.15 (package name com.gl.senza), developed b | |
CVE-2025-61115 |
high | 7.5 | 0.0037 | 2026-11-05 | ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abc |