Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-106064 |
medium | 6.3 | 0.0011 | 2026-11-05 | A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image wi | |
CVE-2026-106063 |
medium | 6.3 | 0.0012 | 2026-11-05 | A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an i | |
CVE-2026-106061 |
medium | 5.5 | 0.0010 | 2026-11-05 | A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnai | |
CVE-2026-106033 |
medium | 5.4 | 0.0024 | 2026-11-05 | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due | |
CVE-2026-104048 |
high | 8.1 | 0.0030 | 2026-11-05 | A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluate | |
CVE-2026-104046 |
medium | 6.2 | 0.0016 | 2026-11-05 | A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) a | |
CVE-2026-104045 |
medium | 4.7 | 0.0013 | 2026-11-05 | A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting | |
CVE-2026-104044 |
medium | 6.2 | 0.0012 | 2026-11-05 | A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sendin | |
CVE-2026-104043 |
medium | 5.5 | 0.0009 | 2026-11-05 | A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) re | |
CVE-2026-104042 |
medium | 5.5 | 0.0015 | 2026-11-05 | A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending | |
CVE-2026-104038 |
medium | 5.9 | 0.0027 | 2026-11-05 | A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitt | |
CVE-2026-104037 |
medium | 5.5 | 0.0014 | 2026-11-05 | A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially c | |
CVE-2026-104036 |
medium | 5.8 | 0.0009 | 2026-11-05 | A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, t | |
CVE-2026-104035 |
medium | 5.5 | 0.0009 | 2026-11-05 | A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allo | |
CVE-2026-104034 |
medium | 4.7 | 0.0009 | 2026-11-05 | A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential | |
CVE-2026-104033 |
medium | 5.4 | 0.0024 | 2026-11-05 | A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightw | |
CVE-2026-103754 |
medium | 5.9 | 0.0034 | 2026-11-05 | A flaw was found in ansible-runner. The unstream_dir() function, which receives and extrac | |
CVE-2026-103641 |
medium | 5.5 | 0.0014 | 2026-11-05 | A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped im | |
CVE-2026-103242 |
high | 7.1 | 0.0013 | 2026-11-05 | A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, un | |
CVE-2024-32475 |
high | 7.5 | 0.0068 | 2026-11-05 | Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster | |
CVE-2026-73856 |
high | 8.6 | 0.0056 | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap | |
CVE-2026-119345 |
high | 7.2 | 0.0012 | 2026-11-05 | Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs atte | |
CVE-2026-104269 |
high | 8.6 | 0.0057 | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap | |
CVE-2026-73074 |
high | 7.1 | 0.0010 | 2026-11-05 | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/ | |
CVE-2026-123096 |
high | 7.1 | 0.0026 | 2026-11-05 | anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker | |
CVE-2026-123095 |
high | 7.7 | 0.0049 | 2026-11-05 | mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_h | |
CVE-2026-123094 |
medium | 5.1 | 0.0018 | 2026-11-05 | Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the servi | |
CVE-2026-122330 |
medium | 6.8 | 0.0024 | 2026-11-05 | Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_s | |
CVE-2026-122329 |
high | 8.5 | 0.0016 | 2026-11-05 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src | |
CVE-2026-122328 |
high | 8.5 | 0.0016 | 2026-11-05 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in Fetc | |
CVE-2026-122327 |
medium | 5.3 | 0.0024 | 2026-11-05 | Meelo through 3.13.1 contains a missing authorization vulnerability that allows authentica | |
CVE-2026-122326 |
medium | 6.9 | 0.0052 | 2026-11-05 | Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-con | |
CVE-2026-122325 |
low | 2.3 | 0.0022 | 2026-11-05 | fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulne | |
CVE-2026-122324 |
low | 2.3 | 0.0022 | 2026-11-05 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-122317 |
medium | 5.3 | 0.0023 | 2026-11-05 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenti | |
CVE-2026-115739 |
medium | 6.0 | 0.0033 | 2026-11-05 | Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11 | |
CVE-2026-107891 |
high | 8.1 | 0.0055 | 2026-11-05 | musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has mul | |
CVE-2025-2487 |
medium | 4.9 | 0.0060 | 2026-11-05 | A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify D | |
CVE-2023-51466 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-51465 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47089 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47088 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47087 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47086 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47085 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47084 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47083 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47082 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-47045 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec | |
CVE-2023-44370 |
— | — | — | 2026-11-05 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota rec |