Browse All CVEs
50,489 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-50257 |
high | 7.8 | 0.0014 | 2026-11-04 | A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence() | |
CVE-2026-50256 |
high | 7.8 | 0.0016 | 2026-11-04 | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatc | |
CVE-2026-4111 |
high | 7.5 | 0.0077 | 2026-11-04 | A flaw was identified in the RAR5 archive decompression logic of the libarchive library, s | |
CVE-2026-48863 |
high | 7.5 | 0.0082 | 2026-11-04 | A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP | |
CVE-2026-62365 |
medium | 5.3 | 0.0028 | 2026-11-04 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for en | |
CVE-2026-122047 |
medium | 6.9 | 0.0029 | 2026-11-04 | A security vulnerability has been detected in Campcodes Complete Advance Loan Management S | |
CVE-2026-5680 |
high | 7.5 | 0.0110 | 2026-11-04 | A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sendin | |
CVE-2026-5674 |
high | 8.8 | 0.0019 | 2026-11-04 | A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker t | |
CVE-2026-56211 |
high | 7.1 | 0.0088 | 2026-11-04 | A remote code execution vulnerability was found in libaom, the reference AV1 codec impleme | |
CVE-2026-56210 |
high | 7.1 | 0.0058 | 2026-11-04 | A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec imp | |
CVE-2026-56209 |
high | 7.1 | 0.0064 | 2026-11-04 | An arbitrary address write vulnerability was found in libaom, the reference AV1 codec impl | |
CVE-2026-56208 |
high | 7.6 | 0.0045 | 2026-11-04 | A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implemen | |
CVE-2026-54230 |
high | 7.8 | 0.0023 | 2026-11-04 | A symlink following vulnerability was found in the ABRT post-create event handler scripts | |
CVE-2026-54229 |
high | 7.0 | 0.0012 | 2026-11-04 | A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownP | |
CVE-2026-54228 |
high | 7.8 | 0.0013 | 2026-11-04 | A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus servi | |
CVE-2026-97702 |
medium | 5.3 | 0.0026 | 2026-11-04 | Open edX Platform enables the authoring and delivery of online learning at any scale. From | |
CVE-2026-77372 |
high | 8.8 | 0.0010 | 2026-11-04 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26. | |
CVE-2025-6020 |
high | 7.8 | 0.0049 | 2026-11-04 | A flaw was found in linux-pam. The module pam_namespace may use access user-controlled pat | |
CVE-2025-59088 |
high | 8.6 | 0.0049 | 2026-11-04 | If kdcproxy receives a request for a realm which does not have server addresses defined in | |
CVE-2026-26158 |
high | 7.0 | 0.0019 | 2026-11-04 | A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside | |
CVE-2026-26157 |
high | 7.0 | 0.0072 | 2026-11-04 | A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilit | |
CVE-2026-26103 |
high | 7.1 | 0.0008 | 2026-11-04 | A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus A | |
CVE-2026-19685 |
high | 7.1 | 0.0019 | 2026-11-04 | NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2 | |
CVE-2026-19546 |
high | 8.8 | 0.0035 | 2026-11-04 | A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z | |
CVE-2026-19389 |
high | 7.1 | 0.0044 | 2026-11-04 | Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-pl | |
CVE-2026-86041 |
medium | 5.3 | 0.0022 | 2026-11-04 | ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 unt | |
CVE-2026-76892 |
high | 8.7 | 0.0029 | 2026-11-04 | tsParticles is a TypeScript library for creating highly customizable particle animations. | |
CVE-2026-76826 |
high | 7.5 | 0.0031 | 2026-11-04 | tsParticles is a TypeScript library for creating highly customizable particle animations. | |
CVE-2026-54381 |
high | 8.7 | 0.0042 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnera | |
CVE-2026-122028 |
medium | 5.3 | 0.0038 | 2026-11-04 | A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulner | |
CVE-2026-57152 |
high | 7.1 | 0.0025 | 2026-11-04 | GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from | |
CVE-2026-54384 |
critical | 9.3 | 0.0066 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that | |
CVE-2026-54383 |
high | 7.1 | 0.0023 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability tha | |
CVE-2026-54382 |
medium | 6.3 | 0.0021 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in | |
CVE-2026-52848 |
critical | 9.2 | 0.0037 | 2026-11-04 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during | |
CVE-2026-4480 |
critical | 9.0 | 0.2869 | 2026-11-04 | 8 PoC | A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job d |
CVE-2026-4424 |
high | 7.5 | 0.0124 | 2026-11-04 | A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the R | |
CVE-2026-62662 |
high | 7.7 | 0.0027 | 2026-11-04 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to ser | |
CVE-2026-53631 |
medium | 5.3 | 0.0025 | 2026-11-04 | GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from | |
CVE-2026-47678 |
high | 8.7 | 0.0024 | 2026-11-04 | GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0 | |
CVE-2026-108387 |
high | 8.5 | 0.0015 | 2026-11-04 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6. | |
CVE-2026-76893 |
medium | 6.9 | 0.0029 | 2026-11-04 | tsParticles is a TypeScript library for creating highly customizable particle animations. | |
CVE-2026-63655 |
high | 7.5 | 0.0043 | 2026-11-04 | tsParticles is a TypeScript library for creating highly customizable particle animations. | |
CVE-2026-54380 |
medium | 5.1 | 0.0016 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability | |
CVE-2026-54378 |
critical | 9.3 | 0.0023 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that a | |
CVE-2026-54377 |
medium | 6.9 | 0.0018 | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerab | |
CVE-2026-54376 |
high | 8.2 | 0.0012 | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom UR | |
CVE-2026-54375 |
high | 8.6 | 0.0015 | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session m | |
CVE-2026-122020 |
medium | 5.3 | 0.0032 | 2026-11-04 | A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected | |
CVE-2026-102280 |
medium | 6.9 | 0.0011 | 2026-11-04 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1. |