Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-1467 |
medium | 5.3 | 0.0037 | 2026-11-05 | A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Ca | |
CVE-2026-16277 |
medium | 6.5 | 0.0050 | 2026-11-05 | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remo | |
CVE-2026-15813 |
medium | 6.5 | 0.0036 | 2026-11-05 | A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Vers | |
CVE-2026-15779 |
medium | 6.1 | 0.0010 | 2026-11-05 | A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the | |
CVE-2026-15714 |
medium | 6.5 | 0.0039 | 2026-11-05 | An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. | |
CVE-2026-15711 |
high | 7.5 | 0.0075 | 2026-11-05 | A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library | |
CVE-2026-15709 |
high | 7.5 | 0.0096 | 2026-11-05 | A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate e | |
CVE-2026-15370 |
high | 7.3 | 0.0017 | 2026-11-05 | A flaw was found in libssh. During SFTP server directory listing, the longname field is co | |
CVE-2026-15003 |
medium | 5.6 | 0.0015 | 2026-11-05 | A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap | |
CVE-2026-14969 |
medium | 4.4 | 0.0011 | 2026-11-05 | A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcod | |
CVE-2026-14940 |
medium | 5.3 | 0.0049 | 2026-11-05 | A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normaliz | |
CVE-2026-119083 |
high | 8.4 | 0.0019 | 2026-11-05 | Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an a | |
CVE-2026-54146 |
high | 8.8 | 0.0021 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-54143 |
critical | 9.8 | 0.0118 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-54142 |
high | 8.7 | 0.0052 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-2272 |
medium | 6.5 | 0.0089 | 2026-11-05 | A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO ima | |
CVE-2026-2271 |
medium | 5.5 | 0.0053 | 2026-11-05 | A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could explo | |
CVE-2026-16473 |
medium | 4.3 | 0.0030 | 2026-11-05 | A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC fram | |
CVE-2026-16461 |
medium | 6.5 | 0.0026 | 2026-11-05 | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short | |
CVE-2026-111253 |
medium | 6.6 | 0.0013 | 2026-11-05 | A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus sessi | |
CVE-2026-76077 |
high | 8.1 | 0.0038 | 2026-11-05 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER t | |
CVE-2026-75615 |
medium | 5.3 | 0.0024 | 2026-11-05 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN r | |
CVE-2026-75614 |
high | 8.1 | 0.0058 | 2026-11-05 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream | |
CVE-2026-49407 |
high | 7.7 | 0.0029 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-118517 |
low | 2.3 | 0.0026 | 2026-11-05 | The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, al | |
CVE-2026-120499 |
high | 8.5 | 0.0042 | 2026-11-05 | h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attac | |
CVE-2026-109131 |
medium | 5.4 | 0.0017 | 2026-11-05 | The Hub collection module documentation renderer in the unified Ansible Automation Platfor | |
CVE-2026-102474 |
medium | 4.0 | 0.0011 | 2026-11-05 | A flaw was found in dash. The printf builtin reserves four bytes before converting a Unico | |
CVE-2026-102473 |
medium | 5.5 | 0.0010 | 2026-11-05 | A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher i | |
CVE-2026-101612 |
medium | 4.0 | 0.0011 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoD | |
CVE-2026-101611 |
medium | 4.4 | 0.0034 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoD | |
CVE-2026-101610 |
medium | 4.9 | 0.0042 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Serve | |
CVE-2026-101609 |
medium | 4.4 | 0.0034 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoD | |
CVE-2026-101608 |
medium | 6.5 | 0.0039 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Serve | |
CVE-2026-101607 |
medium | 4.9 | 0.0031 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Serve | |
CVE-2026-101513 |
low | 3.8 | 0.0017 | 2026-11-05 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported | |
CVE-2026-101510 |
medium | 4.4 | 0.0015 | 2026-11-05 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported v | |
CVE-2026-101501 |
critical | 9.9 | 0.0041 | 2026-11-05 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported | |
CVE-2026-101483 |
medium | 6.5 | 0.0014 | 2026-11-05 | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Support | |
CVE-2026-100231 |
medium | 6.1 | 0.0014 | 2026-11-05 | A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When w | |
CVE-2026-0990 |
medium | 5.9 | 0.0095 | 2026-11-05 | A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerabi | |
CVE-2026-0964 |
medium | 6.3 | 0.0043 | 2026-11-05 | A malicious SCP server can send unexpected paths that could make the client application ov | |
CVE-2026-0810 |
high | 7.1 | 0.0021 | 2026-11-05 | A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate | |
CVE-2026-0716 |
medium | 4.8 | 0.0038 | 2026-11-05 | A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. | |
CVE-2025-9909 |
medium | 6.7 | 0.0018 | 2026-11-05 | A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation compone | |
CVE-2025-9908 |
medium | 6.7 | 0.0022 | 2026-11-05 | A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Ev | |
CVE-2025-9907 |
medium | 6.7 | 0.0018 | 2026-11-05 | A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Ev | |
CVE-2025-9901 |
medium | 5.9 | 0.0047 | 2026-11-05 | A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is | |
CVE-2025-8114 |
medium | 4.7 | 0.0026 | 2026-11-05 | A flaw was found in libssh, a library that implements the SSH protocol. When calculating t | |
CVE-2025-7519 |
medium | 6.7 | 0.0022 | 2026-11-05 | A flaw was found in polkit. When processing an XML policy with 32 or more nested elements |