Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-65133 |
critical | 9.8 | 0.0055 | 2026-11-04 | A SQL injection vulnerability exists in the School Management System (version 1.0) by mani | |
CVE-2025-63939 |
critical | 9.8 | 0.0028 | 2026-11-04 | Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery S | |
CVE-2025-68128 |
— | — | — | 2026-11-04 | Rejected reason: reserved but not needed | |
CVE-2026-76806 |
medium | 6.3 | 0.0025 | 2026-11-04 | Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importD | |
CVE-2026-122192 |
high | 7.1 | 0.0016 | 2026-11-04 | Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 m | |
CVE-2026-121933 |
critical | 9.3 | 0.0098 | 2026-11-04 | A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings | |
CVE-2026-115574 |
medium | 5.3 | 0.0070 | 2026-11-04 | Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with | |
CVE-2026-115474 |
medium | 6.5 | 0.0033 | 2026-11-04 | Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations whe | |
CVE-2026-97705 |
high | 7.5 | 0.0035 | 2026-11-04 | Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15. | |
CVE-2026-97701 |
medium | 6.5 | 0.0043 | 2026-11-04 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, th | |
CVE-2026-63183 |
medium | 6.9 | 0.0018 | 2026-11-04 | OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, Om | |
CVE-2026-121932 |
critical | 9.3 | 0.0238 | 2026-11-04 | A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system | |
CVE-2026-113783 |
high | 7.4 | 0.0035 | 2026-11-04 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.3 until | |
CVE-2026-113782 |
high | 7.1 | 0.0028 | 2026-11-04 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until | |
CVE-2026-113780 |
critical | 9.3 | 0.0014 | 2026-11-04 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until | |
CVE-2026-107846 |
critical | 9.3 | 0.0018 | 2026-11-04 | bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5 | |
CVE-2026-102345 |
medium | 5.1 | 0.0024 | 2026-11-04 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the ne | |
CVE-2026-121930 |
high | 8.5 | 0.0272 | 2026-11-04 | A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the fun | |
CVE-2026-82033 |
high | 8.6 | 0.0022 | 2026-11-04 | DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missi | |
CVE-2026-121931 |
high | 8.5 | 0.0272 | 2026-11-04 | A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted elemen | |
CVE-2026-122124 |
medium | 6.1 | 0.0014 | 2026-11-04 | On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical acce | |
CVE-2026-122120 |
critical | 9.0 | 0.0051 | 2026-11-04 | In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulner | |
CVE-2026-121929 |
low | 2.0 | 0.0019 | 2026-11-04 | A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unkn | |
CVE-2026-121928 |
low | 2.0 | 0.0021 | 2026-11-04 | A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some | |
CVE-2026-97618 |
— | — | 0.0021 | 2026-11-04 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-81010 |
— | — | 0.0018 | 2026-11-04 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-81009 |
— | — | 0.0017 | 2026-11-04 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-80811 |
— | — | 0.0021 | 2026-11-04 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-82029 |
high | 7.1 | 0.0024 | 2026-11-04 | Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows au | |
CVE-2026-122148 |
high | 8.2 | 0.0019 | 2026-11-04 | In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end | |
CVE-2026-57853 |
high | 8.7 | 0.0055 | 2026-11-04 | DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows | |
CVE-2026-122118 |
high | 7.4 | 0.0021 | 2026-11-04 | In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a de | |
CVE-2026-122116 |
medium | 4.3 | 0.0031 | 2026-11-04 | Certain Yealink terminal devices before 2026-04-21 contain an improper access control vuln | |
CVE-2026-121971 |
high | 8.2 | 0.0025 | 2026-11-04 | The component ScopingHttpClient in Symfony HttpClient merges the options of its default sc | |
CVE-2026-121927 |
low | 2.1 | 0.0020 | 2026-11-04 | A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue | |
CVE-2026-107362 |
high | 7.1 | 0.0042 | 2026-11-04 | The bundled FilePond PHP server in Malcolm's file-upload component exposes a fetch route t | |
CVE-2026-9212 |
medium | 5.6 | 0.0027 | 2026-11-04 | Insufficient authentication and input validation in the listed NETGEAR models allow users | |
CVE-2026-122054 |
medium | 5.9 | 0.0045 | 2026-11-04 | Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for e | |
CVE-2026-121926 |
medium | 5.5 | 0.0039 | 2026-11-04 | A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966 | |
CVE-2026-91391 |
low | 3.7 | 0.0026 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-91390 |
medium | 5.4 | 0.0020 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-91389 |
medium | 5.4 | 0.0020 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-91388 |
medium | 4.7 | 0.0015 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-91387 |
medium | 5.4 | 0.0022 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-76506 |
high | 7.6 | 0.0136 | 2026-11-04 | A vulnerability in the web-based management interface of Cisco UCS Central Software could | |
CVE-2026-76419 |
medium | 6.1 | 0.0028 | 2026-11-04 | A vulnerability in the web-based management interface of Cisco Unified Communications Mana | |
CVE-2026-20241 |
medium | 5.3 | 0.0025 | 2026-11-04 | A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and | |
CVE-2026-119747 |
high | 7.1 | 0.0021 | 2026-11-04 | The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnera | |
CVE-2026-119749 |
high | 8.7 | 0.0036 | 2026-11-04 | The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulne | |
CVE-2026-119748 |
medium | 6.9 | 0.0023 | 2026-11-04 | The GetPaid plugin for WordPress before 2.8.63 contains an authorization bypass vulnerabil |