Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-49795 |
high | 7.5 | 0.0062 | 2026-11-04 | A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML ex | |
CVE-2025-49180 |
high | 7.8 | 0.0035 | 2026-11-04 | A flaw was found in the RandR extension, where the RRChangeProviderProperty function does | |
CVE-2025-49179 |
high | 7.3 | 0.0036 | 2026-11-04 | A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function | |
CVE-2025-49177 |
medium | 6.1 | 0.0046 | 2026-11-04 | A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does n | |
CVE-2025-49176 |
high | 7.3 | 0.0038 | 2026-11-04 | A flaw was found in the Big Requests extension. The request length is multiplied by 4 befo | |
CVE-2025-49175 |
medium | 6.1 | 0.0036 | 2026-11-04 | A flaw was found in the X Rendering extension's handling of animated cursors. If a client | |
CVE-2025-3931 |
high | 7.8 | 0.0018 | 2026-11-04 | A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to co | |
CVE-2025-3891 |
high | 7.5 | 0.0160 | 2026-11-04 | A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remot | |
CVE-2025-2240 |
high | 7.5 | 0.0123 | 2026-11-04 | A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-me | |
CVE-2025-26601 |
high | 7.8 | 0.0039 | 2026-11-04 | A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values | |
CVE-2025-26600 |
high | 7.8 | 0.0039 | 2026-11-04 | A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while stil | |
CVE-2025-26599 |
high | 7.8 | 0.0040 | 2026-11-04 | An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function c | |
CVE-2025-26598 |
high | 7.8 | 0.0040 | 2026-11-04 | An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice | |
CVE-2025-26597 |
high | 7.8 | 0.0044 | 2026-11-04 | A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called | |
CVE-2025-26596 |
high | 7.8 | 0.0044 | 2026-11-04 | A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in Xkb | |
CVE-2025-26595 |
high | 7.8 | 0.0044 | 2026-11-04 | A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allo | |
CVE-2025-26594 |
high | 7.8 | 0.0039 | 2026-11-04 | A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in th | |
CVE-2025-23368 |
high | 8.1 | 0.0089 | 2026-11-04 | A flaw was found in Wildfly Elytron integration. The component does not implement sufficie | |
CVE-2026-58128 |
medium | 6.9 | 0.0031 | 2026-11-04 | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vuln | |
CVE-2026-54379 |
— | — | — | 2026-11-04 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-122016 |
medium | 5.3 | 0.0027 | 2026-11-04 | A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects | |
CVE-2026-121749 |
medium | 4.6 | 0.0016 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-121747 |
medium | 6.7 | 0.0018 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-121746 |
medium | 6.7 | 0.0017 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-103002 |
high | 8.8 | 0.0036 | 2026-11-04 | GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provi | |
CVE-2026-10649 |
high | 8.6 | 0.0056 | 2026-11-04 | A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer o | |
CVE-2026-10118 |
high | 7.8 | 0.0025 | 2026-11-04 | A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnera | |
CVE-2026-108094 |
high | 7.8 | 0.0015 | 2026-11-04 | A use-after-free flaw was found in mutter in the Wayland color-management ICC image-descri | |
CVE-2026-107935 |
critical | 9.3 | 0.0024 | 2026-11-04 | A path traversal vulnerability was found in gvproxy, the network forwarder provided by the | |
CVE-2026-105959 |
high | 7.5 | 0.0048 | 2026-11-04 | A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size | |
CVE-2026-105958 |
high | 7.5 | 0.0025 | 2026-11-04 | A flaw was found in spice-server. Multiple migration data handlers use client-supplied off | |
CVE-2026-104988 |
high | 8.1 | 0.0020 | 2026-11-04 | A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails o | |
CVE-2025-4404 |
critical | 9.1 | 0.0200 | 2026-11-04 | 1 PoC | A privilege escalation from host to domain vulnerability was found in the FreeIPA project. |
CVE-2025-48798 |
high | 7.3 | 0.0025 | 2026-11-04 | A flaw was found in GIMP when processing XCF image files. If a user opens one of these ima | |
CVE-2025-48797 |
high | 7.3 | 0.0028 | 2026-11-04 | A flaw was found in GIMP when processing certain TGA image files. If a user opens one of t | |
CVE-2025-48796 |
high | 7.3 | 0.0021 | 2026-11-04 | A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-base | |
CVE-2026-55368 |
high | 8.1 | 0.0032 | 2026-11-04 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae | |
CVE-2026-55367 |
high | 7.5 | 0.0034 | 2026-11-04 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce | |
CVE-2026-115473 |
medium | 6.5 | 0.0026 | 2026-11-04 | Mongoose is an embedded web server and network library. Prior to 7.22, mg_path_is_sane in | |
CVE-2026-101258 |
high | 7.8 | 0.0018 | 2026-11-04 | A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS docu | |
CVE-2026-0603 |
high | 8.3 | 0.0103 | 2026-11-04 | 2 PoC | A flaw was found in Hibernate. A remote attacker with low privileges could exploit a secon |
CVE-2025-9784 |
high | 7.5 | 0.0232 | 2026-11-04 | 1 PoC | A flaw was found in Undertow where malformed client requests can trigger server-side strea |
CVE-2025-8067 |
high | 8.5 | 0.0065 | 2026-11-04 | 1 PoC | A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop d |
CVE-2025-7425 |
high | 7.8 | 0.0044 | 2026-11-04 | A flaw was found in libxslt where the attribute type, atype, flags are modified in a way t | |
CVE-2025-7424 |
high | 7.5 | 0.0130 | 2026-11-04 | A flaw was found in the libxslt library. The same memory field, psvi, is used for both sty | |
CVE-2026-57567 |
high | 8.6 | 0.0066 | 2026-11-04 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access | |
CVE-2026-57566 |
critical | 9.3 | 0.0058 | 2026-11-04 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access | |
CVE-2026-57565 |
medium | 6.5 | 0.0104 | 2026-11-04 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access | |
CVE-2026-57562 |
medium | 6.5 | 0.0043 | 2026-11-04 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access | |
CVE-2026-122019 |
medium | 6.9 | 0.0029 | 2026-11-04 | A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingA |