Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-122266 |
medium | 6.3 | 0.0027 | 2026-11-04 | Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network P | |
CVE-2026-11807 |
critical | 9.6 | 0.0053 | 2026-11-04 | A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocke | |
CVE-2026-11774 |
high | 7.6 | 0.0068 | 2026-11-04 | An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-b | |
CVE-2026-11610 |
high | 8.8 | 0.0049 | 2026-11-04 | A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-d | |
CVE-2026-54374 |
high | 8.7 | 0.0027 | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentia | |
CVE-2026-54373 |
medium | 5.1 | 0.0011 | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic v | |
CVE-2026-54372 |
high | 8.7 | 0.0014 | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL c | |
CVE-2026-83128 |
high | 7.5 | 0.0041 | 2026-11-04 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: I | |
CVE-2024-4027 |
high | 7.5 | 0.0040 | 2026-11-04 | A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.ge | |
CVE-2024-3183 |
high | 8.1 | 0.0205 | 2026-11-04 | 1 PoC | A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using t |
CVE-2024-3094 |
critical | 10.0 | 0.9090 | 2026-11-04 | 89 PoC | Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. |
CVE-2024-3049 |
medium | 5.9 | 0.0053 | 2026-11-04 | A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed | |
CVE-2024-31083 |
high | 7.8 | 0.0186 | 2026-11-04 | A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg ser | |
CVE-2024-31082 |
high | 7.3 | 0.0034 | 2026-11-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICr | |
CVE-2024-31081 |
high | 7.3 | 0.0052 | 2026-11-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveG | |
CVE-2024-31080 |
high | 7.3 | 0.0052 | 2026-11-04 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelec | |
CVE-2026-97693 |
critical | 9.9 | 0.0080 | 2026-11-04 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent developme | |
CVE-2026-122015 |
medium | 5.3 | 0.0031 | 2026-11-04 | A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects | |
CVE-2026-102895 |
critical | 9.8 | 0.0052 | 2026-11-04 | KEV | GPUStack contains an improper authentication vulnerability which could allow unauthenticat |
CVE-2025-1801 |
high | 8.1 | 0.0033 | 2026-11-04 | A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway gr | |
CVE-2025-13947 |
high | 7.4 | 0.0036 | 2026-11-04 | 1 PoC | A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information |
CVE-2025-13502 |
high | 7.5 | 0.0062 | 2026-11-04 | A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds r | |
CVE-2024-5564 |
high | 8.1 | 0.0117 | 2026-11-04 | A vulnerability was found in libndp. This flaw allows a local malicious user to cause a bu | |
CVE-2024-52336 |
high | 7.8 | 0.0030 | 2026-11-04 | A script injection vulnerability was identified in the Tuned package. The `instance_create | |
CVE-2024-4467 |
high | 7.8 | 0.0034 | 2026-11-04 | A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially cra | |
CVE-2026-102894 |
critical | 9.1 | 0.0026 | 2026-11-04 | GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provi | |
CVE-2025-32908 |
high | 7.5 | 0.0062 | 2026-11-04 | A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the value | |
CVE-2025-14523 |
high | 8.2 | 0.0058 | 2026-11-04 | A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and re | |
CVE-2025-11561 |
high | 8.8 | 0.0082 | 2026-11-04 | A flaw was found in the integration of Active Directory and the System Security Services D | |
CVE-2025-11021 |
high | 7.5 | 0.0064 | 2026-11-04 | A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely use | |
CVE-2025-10230 |
critical | 10.0 | 0.3977 | 2026-11-04 | 3 PoC | A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registr |
CVE-2025-0624 |
high | 7.6 | 0.0140 | 2026-11-04 | A flaw was found in grub2. During the network boot process, when trying to search for the | |
CVE-2024-9632 |
high | 7.8 | 0.0090 | 2026-11-04 | A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSet | |
CVE-2024-9050 |
high | 7.8 | 0.0046 | 2026-11-04 | A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libres | |
CVE-2026-121751 |
low | 2.1 | 0.0023 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-121750 |
low | 2.1 | 0.0015 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-121748 |
low | 1.8 | 0.0013 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-121745 |
low | 2.0 | 0.0012 | 2026-11-04 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node. | |
CVE-2026-82418 |
critical | 9.8 | 0.0044 | 2026-11-04 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to | |
CVE-2026-19319 |
medium | 5.3 | 0.0024 | 2026-11-04 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to | |
CVE-2026-17493 |
high | 7.5 | 0.0031 | 2026-11-04 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to | |
CVE-2026-16725 |
medium | 6.5 | 0.0037 | 2026-11-04 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticate | |
CVE-2026-122235 |
medium | 5.7 | 0.0017 | 2026-11-04 | Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-t | |
CVE-2026-122234 |
low | 2.3 | 0.0018 | 2026-11-04 | jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attac | |
CVE-2026-122233 |
medium | 6.3 | 0.0023 | 2026-11-04 | FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode t | |
CVE-2026-122014 |
low | 2.1 | 0.0031 | 2026-11-04 | A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the funct | |
CVE-2026-116376 |
medium | 6.1 | 0.0029 | 2026-11-04 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker | |
CVE-2026-110283 |
medium | 6.5 | 0.0054 | 2026-11-04 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker | |
CVE-2026-110282 |
medium | 6.5 | 0.0038 | 2026-11-04 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker | |
CVE-2026-110281 |
medium | 5.9 | 0.0020 | 2026-11-04 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validat |