Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-102927 |
medium | 5.9 | 0.0032 | 2026-11-05 | HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1 | |
CVE-2026-112110 |
medium | 5.8 | 0.0010 | 2026-11-05 | A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) S | |
CVE-2026-107359 |
high | 7.1 | 0.0022 | 2026-11-05 | Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and ear | |
CVE-2026-123184 |
high | 7.2 | 0.0027 | 2026-11-05 | An incorrect authorization vulnerability exists in the Altium 365 Git Service. The permiss | |
CVE-2026-55622 |
high | 7.7 | 0.0045 | 2026-11-05 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing a | |
CVE-2026-121949 |
low | 2.3 | 0.0024 | 2026-11-05 | The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and | |
CVE-2026-102776 |
medium | 5.1 | 0.0010 | 2026-11-05 | Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend | |
CVE-2026-115452 |
high | 7.5 | 0.0035 | 2026-11-05 | Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.1 | |
CVE-2026-105607 |
high | 8.6 | 0.0031 | 2026-11-05 | Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Rece | |
CVE-2026-97847 |
high | 7.1 | 0.0032 | 2026-11-05 | A flaw was found in the protocol mapper and identity resolution components of Keycloak. Th | |
CVE-2026-97175 |
high | 8.8 | 0.0036 | 2026-11-05 | A flaw was found in the idp-auto-link authenticator of the keycloak-services component, wh | |
CVE-2026-97174 |
medium | 6.8 | 0.0037 | 2026-11-05 | A flaw was found in the Client-Initiated Backchannel Authentication (CIBA) implementation | |
CVE-2026-96453 |
high | 8.0 | 0.0022 | 2026-11-05 | A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to | |
CVE-2026-93998 |
high | 7.4 | 0.0026 | 2026-11-05 | A flaw was found in the SAML adapter component of Keycloak, which is used to secure applic | |
CVE-2026-92857 |
high | 8.1 | 0.0036 | 2026-11-05 | Keycloak provides a Dynamic Client Registration feature that allows users with specific to | |
CVE-2026-92855 |
high | 7.4 | 0.0041 | 2026-11-05 | A flaw was found in the SAML identity broker component of Keycloak, which is used to deleg | |
CVE-2026-120859 |
high | 8.5 | 0.0019 | 2026-11-05 | PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5.1.15, 5.2 | |
CVE-2026-112109 |
high | 7.3 | 0.0014 | 2026-11-05 | A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) S | |
CVE-2026-77439 |
high | 8.8 | 0.0060 | 2026-11-05 | Immich is a self-hosted photo and video management solution. Prior to 3.0.3, an authentica | |
CVE-2026-82965 |
high | 7.5 | 0.0065 | 2026-11-05 | A flaw was found in the SAML implementation of Keycloak, an open-source identity and acces | |
CVE-2026-104867 |
medium | 4.3 | 0.0031 | 2026-11-05 | Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 u | |
CVE-2026-12353 |
medium | 5.3 | 0.0044 | 2026-11-05 | An unauthenticated attacker could trigger an Out of Memory condition to crash the Java pro | |
CVE-2026-13757 |
medium | 6.2 | 0.0015 | 2026-11-05 | A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_g | |
CVE-2026-12892 |
medium | 4.4 | 0.0016 | 2026-11-05 | A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially craft | |
CVE-2026-12891 |
medium | 4.3 | 0.0039 | 2026-11-05 | A flaw was found in the GStreamer gst-plugins-bad package. When processing a malformed H.2 | |
CVE-2026-12725 |
medium | 5.9 | 0.0053 | 2026-11-05 | A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query loggin | |
CVE-2026-12549 |
medium | 4.8 | 0.0036 | 2026-11-05 | The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specif | |
CVE-2026-112214 |
medium | 6.5 | 0.0021 | 2026-11-05 | A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple I | |
CVE-2025-5987 |
high | 8.1 | 0.0173 | 2026-11-05 | A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an | |
CVE-2025-6395 |
medium | 6.5 | 0.0077 | 2026-11-05 | A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ | |
CVE-2025-6196 |
medium | 5.5 | 0.0025 | 2026-11-05 | A flaw was found in libgepub, a library used to read EPUB files. The software mishandles f | |
CVE-2025-6035 |
medium | 6.1 | 0.0089 | 2026-11-05 | A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" | |
CVE-2025-6021 |
high | 7.5 | 0.0147 | 2026-11-05 | A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer si | |
CVE-2025-66286 |
medium | 4.7 | 0.0023 | 2026-11-05 | An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedl | |
CVE-2025-62231 |
high | 7.3 | 0.0030 | 2026-11-05 | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bo | |
CVE-2025-62230 |
high | 7.3 | 0.0028 | 2026-11-05 | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling cli | |
CVE-2025-62229 |
high | 7.3 | 0.0051 | 2026-11-05 | A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension | |
CVE-2025-61664 |
medium | 4.9 | 0.0015 | 2026-11-05 | A vulnerability in the GRUB2 bootloader has been identified in the normal module. This fla | |
CVE-2025-61663 |
medium | 4.9 | 0.0014 | 2026-11-05 | A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an | |
CVE-2025-61661 |
medium | 4.8 | 0.0021 | 2026-11-05 | A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This | |
CVE-2025-5988 |
medium | 5.3 | 0.0029 | 2026-11-05 | A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin chec | |
CVE-2025-58713 |
medium | 6.4 | 0.0015 | 2026-11-05 | A container privilege escalation flaw was found in certain Red Hat Process Automation Mana | |
CVE-2026-54145 |
high | 8.8 | 0.0009 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-54141 |
critical | 9.0 | 0.0076 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-49405 |
medium | 6.2 | 0.0025 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-49393 |
high | 8.4 | 0.0030 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-1539 |
medium | 5.8 | 0.0027 | 2026-11-05 | A flaw was found in the libsoup HTTP library that can cause proxy authentication credentia | |
CVE-2026-1536 |
medium | 5.3 | 0.0034 | 2026-11-05 | A flaw was found in libsoup. An attacker who can control the input for the Content-Disposi | |
CVE-2026-1489 |
medium | 5.4 | 0.0037 | 2026-11-05 | A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion | |
CVE-2026-1484 |
medium | 4.2 | 0.0034 | 2026-11-05 | A flaw was found in the GLib Base64 encoding routine when processing very large input data |