Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107167 |
medium | 6.2 | 0.0012 | 2026-11-05 | A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a | |
CVE-2026-107168 |
medium | 6.2 | 0.0011 | 2026-11-05 | A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 chara | |
CVE-2024-34364 |
medium | 5.7 | 0.0047 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memor | |
CVE-2024-34363 |
high | 7.5 | 0.0067 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the | |
CVE-2024-34362 |
medium | 5.9 | 0.0059 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in | |
CVE-2024-32976 |
high | 7.5 | 0.0067 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filt | |
CVE-2024-32975 |
medium | 5.9 | 0.0069 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDa | |
CVE-2024-32974 |
medium | 5.9 | 0.0069 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `Envo | |
CVE-2025-26466 |
medium | 5.9 | 0.3868 | 2026-11-05 | 5 PoC | A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a p |
CVE-2025-26465 |
medium | 6.8 | 0.0772 | 2026-11-05 | 2 PoC | A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machin |
CVE-2025-23367 |
medium | 6.5 | 0.0077 | 2026-11-05 | A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When aut | |
CVE-2026-70660 |
medium | 6.9 | 0.0013 | 2026-11-05 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion | |
CVE-2026-70659 |
high | 7.8 | 0.0013 | 2026-11-05 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion | |
CVE-2026-121139 |
high | 7.3 | 0.0015 | 2026-11-05 | The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby t | |
CVE-2026-115740 |
medium | 5.3 | 0.0026 | 2026-11-05 | Server side request forgery vulnerability exists in the DLP on-prem extensions version 11. | |
CVE-2025-5449 |
medium | 6.5 | 0.0103 | 2026-11-05 | A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due | |
CVE-2025-5372 |
high | 8.8 | 0.0051 | 2026-11-05 | A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifical | |
CVE-2025-5351 |
medium | 6.5 | 0.0063 | 2026-11-05 | A flaw was found in the key export functionality of libssh. The issue occurs in the intern | |
CVE-2025-5318 |
medium | 5.4 | 0.0189 | 2026-11-05 | A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read | |
CVE-2025-5222 |
high | 7.0 | 0.0044 | 2026-11-05 | 1 PoC | A stack buffer overflow was found in Internationl components for unicode (ICU ). While run |
CVE-2025-4969 |
medium | 6.5 | 0.0091 | 2026-11-05 | A vulnerability was found in the libsoup package. This flaw stems from its failure to corr | |
CVE-2025-4953 |
high | 7.4 | 0.0066 | 2026-11-05 | A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type | |
CVE-2025-49178 |
medium | 5.5 | 0.0026 | 2026-11-05 | A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a clien | |
CVE-2026-119751 |
medium | 6.9 | 0.0026 | 2026-11-05 | Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerabil | |
CVE-2026-102615 |
high | 7.6 | 0.0025 | 2026-11-05 | HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a file accordi | |
CVE-2026-102523 |
high | 8.0 | 0.0075 | 2026-11-05 | MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, | |
CVE-2025-54771 |
medium | 4.9 | 0.0015 | 2026-11-05 | A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootload | |
CVE-2025-54770 |
medium | 4.9 | 0.0016 | 2026-11-05 | A vulnerability has been identified in the GRUB2 bootloader's network module that poses an | |
CVE-2026-103932 |
medium | 5.8 | 0.0032 | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap | |
CVE-2025-4877 |
medium | 4.5 | 0.0022 | 2026-11-05 | There's a vulnerability in the libssh package where when a libssh consumer passes in an un | |
CVE-2025-4598 |
medium | 4.7 | 0.0128 | 2026-11-05 | A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUI | |
CVE-2025-4574 |
medium | 6.5 | 0.0057 | 2026-11-05 | In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race co | |
CVE-2025-4478 |
medium | 6.5 | 0.0054 | 2026-11-05 | A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted | |
CVE-2025-4432 |
medium | 5.3 | 0.0105 | 2026-11-05 | A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking i | |
CVE-2025-4382 |
medium | 5.9 | 0.0035 | 2026-11-05 | A flaw was found in systems utilizing LUKS-encrypted disks with GRUB configured for TPM-ba | |
CVE-2025-4035 |
medium | 4.3 | 0.0054 | 2026-11-05 | A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cooki | |
CVE-2025-47712 |
medium | 6.5 | 0.0053 | 2026-11-05 | A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of | |
CVE-2025-47711 |
medium | 6.5 | 0.0048 | 2026-11-05 | There's a flaw in the nbdkit server when handling responses from its plugins regarding the | |
CVE-2025-46421 |
medium | 6.8 | 0.0058 | 2026-11-05 | A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistake | |
CVE-2025-46420 |
medium | 6.5 | 0.0059 | 2026-11-05 | A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_qua | |
CVE-2025-46400 |
medium | 5.5 | 0.0025 | 2026-11-05 | In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to | |
CVE-2025-46399 |
medium | 5.5 | 0.0025 | 2026-11-05 | A flaw was found in fig2dev. This vulnerability allows availability via local input manipu | |
CVE-2025-46398 |
medium | 5.5 | 0.0027 | 2026-11-05 | In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption | |
CVE-2026-61813 |
low | 3.7 | 0.0015 | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap | |
CVE-2026-123158 |
high | 8.1 | 0.1890 | 2026-11-05 | KEV 29 PoC | OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability |
CVE-2026-10832 |
medium | 5.9 | 0.0072 | 2026-11-05 | A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker ca | |
CVE-2026-10805 |
medium | 6.7 | 0.0017 | 2026-11-05 | A flaw was found in NetworkManager. This local privilege escalation vulnerability exists i | |
CVE-2026-106067 |
medium | 6.3 | 0.0011 | 2026-11-05 | A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large | |
CVE-2026-106066 |
medium | 6.3 | 0.0011 | 2026-11-05 | A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting v | |
CVE-2026-106065 |
medium | 6.3 | 0.0012 | 2026-11-05 | A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extre |