Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-7345 |
high | 7.5 | 0.0134 | 2026-11-05 | A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io- | |
CVE-2026-97371 |
medium | 5.3 | 0.0048 | 2026-11-05 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_ge | |
CVE-2026-85287 |
medium | 6.5 | 0.0029 | 2026-11-05 | HomeBox is a home inventory and organization system. Prior to 0.27.0, POST /api/v1/users/r | |
CVE-2026-82413 |
high | 8.8 | 0.0107 | 2026-11-05 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts | |
CVE-2026-75599 |
medium | 5.4 | 0.0016 | 2026-11-05 | HomeBox is a home inventory and organization system. Prior to 0.27.0, the maybeUrl() utili | |
CVE-2026-54144 |
medium | 6.1 | 0.0050 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-54140 |
high | 8.3 | 0.0055 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | |
CVE-2026-123151 |
high | 7.5 | 0.0051 | 2026-11-05 | A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a | |
CVE-2026-121997 |
high | 8.1 | 0.0071 | 2026-11-05 | A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated rem | |
CVE-2026-121996 |
high | 8.2 | 0.0047 | 2026-11-05 | A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated | |
CVE-2026-121995 |
high | 7.5 | 0.0029 | 2026-11-05 | A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-c | |
CVE-2026-121994 |
high | 8.8 | 0.0048 | 2026-11-05 | A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-con | |
CVE-2026-114232 |
high | 8.1 | 0.0041 | 2026-11-05 | A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. | |
CVE-2026-112208 |
high | 8.1 | 0.0045 | 2026-11-05 | A flaw was found in the Organization identity-first login flow of the Keycloak authenticat | |
CVE-2026-110932 |
high | 7.5 | 0.0057 | 2026-11-05 | A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and a | |
CVE-2026-110931 |
high | 7.5 | 0.0066 | 2026-11-05 | A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity an | |
CVE-2026-107602 |
high | 7.5 | 0.0073 | 2026-11-05 | A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity an | |
CVE-2026-107123 |
high | 7.5 | 0.0069 | 2026-11-05 | A flaw was found in the SAML XML processing component of Keycloak, an open-source identity | |
CVE-2026-103112 |
high | 7.5 | 0.0039 | 2026-11-05 | A flaw was found in the authentication session handling of the keycloak-services component | |
CVE-2026-102739 |
high | 7.8 | 0.0015 | 2026-11-05 | ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre | |
CVE-2026-11884 |
medium | 6.5 | 0.0035 | 2026-11-05 | A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclas | |
CVE-2026-11873 |
medium | 6.5 | 0.0046 | 2026-11-05 | An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) retu | |
CVE-2026-11820 |
medium | 6.5 | 0.0039 | 2026-11-05 | A flaw was found in the community.general Ansible collection's nexmo module. The module co | |
CVE-2026-11819 |
medium | 5.5 | 0.0016 | 2026-11-05 | Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C | |
CVE-2026-11791 |
medium | 5.0 | 0.0035 | 2026-11-05 | A flaw was found in 389 Directory Server. During schema reload, the attr_syntax_swap_ht() | |
CVE-2026-11790 |
medium | 4.9 | 0.0029 | 2026-11-05 | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does n | |
CVE-2026-11789 |
medium | 6.5 | 0.0028 | 2026-11-05 | A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsign | |
CVE-2026-11788 |
high | 7.5 | 0.0056 | 2026-11-05 | A flaw was found in 389 Directory Server. The dereference control plugin does not check fo | |
CVE-2026-11787 |
medium | 6.3 | 0.0018 | 2026-11-05 | A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before | |
CVE-2026-11785 |
medium | 4.3 | 0.0018 | 2026-11-05 | A flaw was found in 389 Directory Server. A type confusion in the SSO token extended opera | |
CVE-2026-11770 |
high | 7.5 | 0.0053 | 2026-11-05 | A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LD | |
CVE-2026-11611 |
medium | 6.5 | 0.0024 | 2026-11-05 | A flaw was found in 389 Directory Server. The Content Synchronization persistent search pl | |
CVE-2026-110777 |
medium | 5.7 | 0.0038 | 2026-11-05 | A flaw was found in evolution-data-server. Calendar events containing a file:// URI in the | |
CVE-2026-109833 |
medium | 5.9 | 0.0037 | 2026-11-05 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VN | |
CVE-2026-85286 |
low | 3.7 | 0.0029 | 2026-11-05 | HomeBox is a home inventory and organization system. Prior to 0.27.0, the POST /api/v1/use | |
CVE-2026-123125 |
medium | 6.3 | 0.0021 | 2026-11-05 | The Symfony Validator component IpValidator incompletely classifies internal addresses in | |
CVE-2026-119344 |
critical | 9.1 | 0.0030 | 2026-11-05 | Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI | |
CVE-2026-101617 |
medium | 4.9 | 0.0031 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoD | |
CVE-2026-101616 |
medium | 6.5 | 0.0039 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Serve | |
CVE-2026-101615 |
medium | 4.4 | 0.0014 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoD | |
CVE-2026-101614 |
medium | 4.9 | 0.0042 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoD | |
CVE-2026-101613 |
medium | 4.9 | 0.0042 | 2026-11-05 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Serve | |
CVE-2026-101479 |
high | 8.6 | 0.0046 | 2026-11-05 | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions | |
CVE-2026-108119 |
medium | 6.3 | 0.0013 | 2026-11-05 | A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink | |
CVE-2026-108093 |
medium | 5.5 | 0.0010 | 2026-11-05 | A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simul | |
CVE-2026-108063 |
medium | 5.5 | 0.0012 | 2026-11-05 | A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to v | |
CVE-2026-107655 |
medium | 4.0 | 0.0026 | 2026-11-05 | A flaw was found in CUPS. When processing embedded job ticket comments within documents, t | |
CVE-2026-107651 |
medium | 5.5 | 0.0018 | 2026-11-05 | A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG met | |
CVE-2026-107466 |
medium | 6.1 | 0.0019 | 2026-11-05 | A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause inform | |
CVE-2026-107169 |
medium | 6.2 | 0.0011 | 2026-11-05 | A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF |