Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-123024 |
medium | 5.5 | 0.0068 | 2026-11-05 | A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the | |
CVE-2026-105325 |
high | 7.5 | 0.0027 | 2026-11-05 | Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user wit | |
CVE-2026-100228 |
medium | 6.5 | 0.0037 | 2026-11-05 | Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allow | |
CVE-2026-100168 |
medium | 6.5 | 0.0034 | 2026-11-05 | Direct Request ('Forced Browsing') in the Content Manager component in Apache OFBiz 24.09. | |
CVE-2024-52337 |
medium | 5.5 | 0.0030 | 2026-11-05 | A log spoofing flaw was found in the Tuned package due to improper sanitization of some AP | |
CVE-2026-76563 |
medium | 6.1 | 0.0019 | 2026-11-05 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerabilit | |
CVE-2026-85627 |
high | 8.8 | 0.0051 | 2026-11-05 | Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Templa | |
CVE-2026-84728 |
medium | 5.4 | 0.0052 | 2026-11-05 | Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms, when docu | |
CVE-2026-123059 |
high | 7.5 | 0.0021 | 2026-11-05 | In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments w | |
CVE-2026-123022 |
medium | 5.5 | 0.0164 | 2026-11-05 | A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted elemen | |
CVE-2026-105321 |
high | 7.5 | 0.0038 | 2026-11-05 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-104720 |
high | 7.5 | 0.0046 | 2026-11-05 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2024-56827 |
medium | 5.6 | 0.0027 | 2026-11-05 | A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggere | |
CVE-2024-56826 |
medium | 5.6 | 0.0032 | 2026-11-05 | A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggere | |
CVE-2026-117691 |
critical | 9.1 | 0.0028 | 2026-11-05 | 1 PoC | A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue o |
CVE-2026-107912 |
high | 7.7 | 0.0016 | 2026-11-05 | A flaw was found in the management interface of the Quarkus framework, specifically within | |
CVE-2026-123119 |
low | 2.3 | 0.0023 | 2026-11-05 | The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP ad | |
CVE-2026-101651 |
medium | 6.5 | 0.0039 | 2026-11-05 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (compone | |
CVE-2026-101650 |
high | 7.1 | 0.0038 | 2026-11-05 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (compone | |
CVE-2026-101649 |
high | 7.1 | 0.0038 | 2026-11-05 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (compone | |
CVE-2026-101559 |
medium | 6.5 | 0.0034 | 2026-11-05 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO V | |
CVE-2026-101558 |
medium | 6.1 | 0.0013 | 2026-11-05 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Appr | |
CVE-2026-101556 |
high | 7.5 | 0.0027 | 2026-11-05 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101555 |
high | 7.5 | 0.0027 | 2026-11-05 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101554 |
high | 7.5 | 0.0027 | 2026-11-05 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101553 |
medium | 6.5 | 0.0022 | 2026-11-05 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element | |
CVE-2026-101551 |
high | 7.5 | 0.0040 | 2026-11-05 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (compo | |
CVE-2026-101538 |
medium | 6.5 | 0.0034 | 2026-11-05 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component | |
CVE-2026-101537 |
critical | 9.8 | 0.0045 | 2026-11-05 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The | |
CVE-2026-101515 |
medium | 5.9 | 0.0033 | 2026-11-05 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component | |
CVE-2026-101499 |
critical | 9.8 | 0.0056 | 2026-11-05 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component | |
CVE-2026-101476 |
medium | 4.3 | 0.0027 | 2026-11-05 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Mark | |
CVE-2026-101467 |
high | 7.4 | 0.0035 | 2026-11-05 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal F | |
CVE-2026-101463 |
high | 7.5 | 0.0044 | 2026-11-05 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open | |
CVE-2026-101408 |
medium | 6.1 | 0.0013 | 2026-11-05 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Emai | |
CVE-2026-101406 |
low | 3.7 | 0.0025 | 2026-11-05 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Mark | |
CVE-2026-101405 |
medium | 4.8 | 0.0021 | 2026-11-05 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Mark | |
CVE-2026-39747 |
high | 8.5 | 0.0033 | 2026-11-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2025-65125 |
critical | 9.8 | 0.0038 | 2026-11-05 | SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attack | |
CVE-2025-25364 |
high | 8.4 | 0.0089 | 2026-11-05 | A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Spe | |
CVE-2025-63364 |
high | 7.5 | 0.0028 | 2026-11-05 | Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW | |
CVE-2025-63735 |
medium | 6.1 | 0.0024 | 2026-11-05 | 1 PoC | A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 vi |
CVE-2025-51746 |
critical | 9.8 | 0.0051 | 2026-11-05 | An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber end | |
CVE-2025-51745 |
critical | 9.8 | 0.0051 | 2026-11-05 | An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerab | |
CVE-2025-51744 |
critical | 9.8 | 0.0051 | 2026-11-05 | An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnera | |
CVE-2025-51743 |
critical | 9.8 | 0.0051 | 2026-11-05 | An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCate | |
CVE-2025-51741 |
high | 7.5 | 0.0037 | 2026-11-05 | An issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing | |
CVE-2025-61168 |
critical | 9.8 | 0.0053 | 2026-11-05 | An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute a | |
CVE-2025-61167 |
medium | 6.5 | 0.0022 | 2026-11-05 | SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the | |
CVE-2025-64066 |
high | 8.6 | 0.0030 | 2026-11-05 | Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access |