Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-0567 |
high | 7.5 | 0.0139 | 2026-11-05 | A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certifi | |
CVE-2024-0565 |
high | 7.4 | 0.0200 | 2026-11-05 | An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client | |
CVE-2024-0562 |
high | 7.8 | 0.0025 | 2026-11-05 | A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregiste | |
CVE-2024-0560 |
medium | 4.3 | 0.0049 | 2026-11-05 | A vulnerability was found in 3Scale, when used with Keycloak 15 (or RHSSO 7.5.0) and super | |
CVE-2024-0553 |
high | 7.5 | 0.0161 | 2026-11-05 | A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PS | |
CVE-2023-7250 |
medium | 5.3 | 0.0093 | 2026-11-05 | A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and S | |
CVE-2023-7192 |
medium | 4.4 | 0.0030 | 2026-11-05 | A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrac | |
CVE-2023-6917 |
medium | 6.0 | 0.0020 | 2026-11-05 | A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming fr | |
CVE-2024-2199 |
medium | 5.7 | 0.0056 | 2026-11-05 | A denial of service vulnerability was found in 389-ds-base ldap server. This issue may all | |
CVE-2024-2002 |
high | 7.5 | 0.0109 | 2026-11-05 | A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, l | |
CVE-2024-1481 |
medium | 5.3 | 0.0113 | 2026-11-05 | A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP reques | |
CVE-2024-1459 |
medium | 5.3 | 0.0171 | 2026-11-05 | A path traversal vulnerability was found in Undertow. This issue may allow a remote attack | |
CVE-2024-1441 |
medium | 5.5 | 0.0040 | 2026-11-05 | 1 PoC | An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt |
CVE-2024-12086 |
medium | 6.8 | 0.0179 | 2026-11-05 | A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitra | |
CVE-2026-73098 |
critical | 10.0 | 0.0046 | 2026-11-05 | Improper control of dynamically-loaded code vulnerability in Apache Juneau. When Apache J | |
CVE-2026-73095 |
high | 8.7 | 0.0043 | 2026-11-05 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The | |
CVE-2026-123018 |
medium | 5.5 | 0.0050 | 2026-11-05 | A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects | |
CVE-2026-96677 |
critical | 10.0 | 0.0044 | 2026-11-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-73117 |
critical | 10.0 | 0.0044 | 2026-11-05 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vuln | |
CVE-2026-73116 |
critical | 10.0 | 0.0041 | 2026-11-05 | Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau Re | |
CVE-2026-73101 |
critical | 10.0 | 0.0043 | 2026-11-05 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Junea | |
CVE-2026-73100 |
critical | 10.0 | 0.0043 | 2026-11-05 | Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The defa | |
CVE-2026-73099 |
critical | 10.0 | 0.0021 | 2026-11-05 | Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts | |
CVE-2026-121489 |
critical | 10.0 | 0.0050 | 2026-11-05 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2023-5380 |
medium | 4.7 | 0.0070 | 2026-11-05 | A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a v | |
CVE-2023-5379 |
high | 7.5 | 0.0103 | 2026-11-05 | A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size | |
CVE-2026-27542 |
critical | 9.8 | 0.0190 | 2026-11-05 | 1 PoC | Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesa |
CVE-2026-27540 |
critical | 9.0 | 0.0292 | 2026-11-05 | 1 PoC | Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Wo |
CVE-2026-27541 |
high | 7.2 | 0.0028 | 2026-11-05 | 1 PoC | Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privi |
CVE-2023-5341 |
medium | 5.5 | 0.0048 | 2026-11-05 | A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. | |
CVE-2026-13423 |
critical | 9.8 | 0.0096 | 2026-11-05 | The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce veri | |
CVE-2026-123036 |
medium | 5.5 | 0.0015 | 2026-11-05 | A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result | |
CVE-2022-2127 |
medium | 5.9 | 0.0172 | 2026-11-05 | An out-of-bounds read vulnerability was found in Samba due to insufficient length checks i | |
CVE-2020-25720 |
high | 7.5 | 0.0049 | 2026-11-05 | A vulnerability was found in Samba where a delegated administrator with permission to crea | |
CVE-2026-118869 |
high | 8.7 | 0.0106 | 2026-11-05 | An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticate | |
CVE-2026-117679 |
medium | 5.1 | 0.0014 | 2026-11-05 | A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated | |
CVE-2026-109408 |
high | 7.4 | 0.0018 | 2026-11-05 | vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate an | |
CVE-2026-107776 |
low | 2.2 | 0.0020 | 2026-11-05 | The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor | |
CVE-2026-100109 |
critical | 9.8 | 0.0037 | 2026-11-05 | The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capab | |
CVE-2026-62041 |
medium | 5.4 | 0.0014 | 2026-11-05 | Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allo | |
CVE-2026-112072 |
medium | 6.5 | 0.0033 | 2026-11-05 | vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a | |
CVE-2026-123033 |
high | 8.3 | 0.0044 | 2026-11-05 | Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE bef | |
CVE-2026-123025 |
critical | 9.4 | 0.0063 | 2026-11-05 | 1 PoC | An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation mo |
CVE-2026-13584 |
high | 7.1 | 0.0019 | 2026-11-05 | Improper Enforcement of Message Integrity During Transmission in a Communication Channel v | |
CVE-2026-123029 |
high | 7.5 | 0.0040 | 2026-11-05 | Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote | |
CVE-2026-16438 |
critical | 9.4 | 0.0029 | 2026-11-05 | Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10. | |
CVE-2026-16437 |
high | 7.1 | 0.0011 | 2026-11-05 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electr | |
CVE-2026-16436 |
critical | 9.2 | 0.0038 | 2026-11-05 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electr | |
CVE-2026-123017 |
medium | 6.5 | 0.0026 | 2026-11-05 | GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the ser | |
CVE-2026-91049 |
medium | 6.4 | 0.0021 | 2026-11-05 | The EWWW Image Optimizer WordPress plugin before 8.9.1 does not properly sanitize and rest |