Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-0622 |
medium | 6.4 | 0.0028 | 2026-11-05 | A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are no | |
CVE-2025-0620 |
medium | 4.9 | 0.0080 | 2026-11-05 | A flaw was found in Samba. The smbd service daemon does not pick up group membership chang | |
CVE-2025-0306 |
high | 7.4 | 0.0066 | 2026-11-05 | A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack | |
CVE-2024-9979 |
medium | 5.3 | 0.0021 | 2026-11-05 | A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially le | |
CVE-2024-9902 |
medium | 6.3 | 0.0025 | 2026-11-05 | 1 PoC | A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user |
CVE-2024-9671 |
medium | 5.3 | 0.0028 | 2026-11-05 | A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a | |
CVE-2024-8775 |
medium | 5.5 | 0.0027 | 2026-11-05 | A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can | |
CVE-2024-8676 |
high | 7.4 | 0.0075 | 2026-11-05 | A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive | |
CVE-2024-8445 |
medium | 5.7 | 0.0042 | 2026-11-05 | The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certa | |
CVE-2024-8418 |
high | 7.5 | 0.0081 | 2026-11-05 | A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to | |
CVE-2024-8235 |
medium | 6.2 | 0.0024 | 2026-11-05 | A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for mu | |
CVE-2024-8176 |
high | 7.5 | 0.0135 | 2026-11-05 | 1 PoC | A stack overflow vulnerability exists in the libexpat library due to the way it handles re |
CVE-2024-7409 |
high | 7.5 | 0.0103 | 2026-11-05 | A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (Do | |
CVE-2024-7383 |
high | 7.4 | 0.0039 | 2026-11-05 | A flaw was found in libnbd. The client did not always correctly verify the NBD server's ce | |
CVE-2024-7259 |
medium | 4.9 | 0.0031 | 2026-11-05 | A flaw was found in oVirt. A user with administrator privileges, including users with the | |
CVE-2024-7006 |
high | 7.5 | 0.0152 | 2026-11-05 | A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may a | |
CVE-2024-6840 |
medium | 6.6 | 0.0043 | 2026-11-05 | An improper authorization flaw exists in the Ansible Automation Controller. This flaw allo | |
CVE-2026-119744 |
high | 7.7 | 0.0044 | 2026-11-05 | Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web | |
CVE-2026-39726 |
high | 7.1 | 0.0023 | 2026-11-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-12748 |
medium | 5.5 | 0.0022 | 2026-11-05 | 1 PoC | A flaw was discovered in libvirt in the XML file processing. More specifically, the parsin |
CVE-2025-12464 |
medium | 6.2 | 0.0018 | 2026-11-05 | A stack-based buffer overflow was found in the QEMU e1000 network device. The code for pad | |
CVE-2025-12105 |
high | 7.5 | 0.0046 | 2026-11-05 | A flaw was found in the asynchronous message queue handling of the libsoup library, widely | |
CVE-2024-45779 |
medium | 6.0 | 0.0029 | 2026-11-05 | An integer overflow flaw was found in the BFS file system driver in grub2. When reading a | |
CVE-2024-45778 |
medium | 5.5 | 0.0029 | 2026-11-05 | A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem m | |
CVE-2024-45777 |
medium | 6.7 | 0.0029 | 2026-11-05 | A flaw was found in grub2. The calculation of the translation buffer when reading a langua | |
CVE-2024-45776 |
medium | 6.7 | 0.0031 | 2026-11-05 | When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer | |
CVE-2024-45775 |
medium | 5.2 | 0.0029 | 2026-11-05 | A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_ | |
CVE-2024-45774 |
medium | 6.7 | 0.0031 | 2026-11-05 | A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub | |
CVE-2024-45770 |
medium | 4.4 | 0.0029 | 2026-11-05 | A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited i | |
CVE-2024-45769 |
medium | 5.5 | 0.0026 | 2026-11-05 | A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to | |
CVE-2026-82894 |
high | 7.5 | 0.0050 | 2026-11-05 | Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platf | |
CVE-2026-81828 |
high | 8.1 | 0.0036 | 2026-11-05 | Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all | |
CVE-2026-81816 |
low | 3.5 | 0.0031 | 2026-11-05 | XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 | |
CVE-2026-81815 |
critical | 9.8 | 0.0061 | 2026-11-05 | SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 bef | |
CVE-2026-81808 |
medium | 6.5 | 0.0039 | 2026-11-05 | Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all | |
CVE-2026-81744 |
medium | 6.5 | 0.0029 | 2026-11-05 | Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 | |
CVE-2026-81734 |
medium | 6.5 | 0.0039 | 2026-11-05 | Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platfo | |
CVE-2026-76152 |
medium | 6.5 | 0.0050 | 2026-11-05 | Path traversal and missing authorization check in the imageCrop and imageRotate services i | |
CVE-2026-76150 |
medium | 6.5 | 0.0035 | 2026-11-05 | Path traversal and missing authorization check in the replaceImageToExistImage service in | |
CVE-2026-74841 |
critical | 9.1 | 0.0052 | 2026-11-05 | In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator nam | |
CVE-2026-73580 |
medium | 5.3 | 0.0039 | 2026-11-05 | Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on | |
CVE-2026-73578 |
high | 7.5 | 0.0062 | 2026-11-05 | Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 befor | |
CVE-2026-73577 |
high | 7.5 | 0.0059 | 2026-11-05 | 1 PoC | Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08 on all pla |
CVE-2026-71901 |
high | 8.1 | 0.0039 | 2026-11-05 | Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OF | |
CVE-2026-68524 |
high | 7.5 | 0.0043 | 2026-11-05 | 1 PoC | An unauthenticated attacker can exploit temporary-file handling, access an open file descr |
CVE-2026-66903 |
medium | 6.5 | 0.0044 | 2026-11-05 | Authenticated Path Traversal in Catalog Image Management allows writing image files outsid | |
CVE-2026-123032 |
medium | 5.5 | 0.0058 | 2026-11-05 | A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42e | |
CVE-2025-14946 |
medium | 4.8 | 0.0014 | 2026-11-05 | A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to o | |
CVE-2025-14905 |
high | 7.2 | 0.0129 | 2026-11-05 | A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in | |
CVE-2025-14831 |
medium | 5.3 | 0.0066 | 2026-11-05 | A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessi |