Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-23314 |
high | 8.8 | 0.0128 | 2026-11-04 | An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows | |
CVE-2026-106554 |
high | 7.5 | 0.0038 | 2026-11-04 | One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CB | |
CVE-2026-121967 |
low | 2.3 | 0.0026 | 2026-11-04 | Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2 | |
CVE-2026-121966 |
high | 7.0 | 0.0033 | 2026-11-04 | Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3. | |
CVE-2026-121965 |
medium | 6.0 | 0.0041 | 2026-11-04 | Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype pollution | |
CVE-2026-121964 |
high | 8.7 | 0.0057 | 2026-11-04 | FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, | |
CVE-2026-121963 |
high | 8.2 | 0.0031 | 2026-11-04 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic | |
CVE-2026-121962 |
high | 7.2 | 0.0033 | 2026-11-04 | FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when h | |
CVE-2026-121961 |
high | 8.2 | 0.0031 | 2026-11-04 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC | |
CVE-2026-121960 |
high | 8.7 | 0.0056 | 2026-11-04 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow | |
CVE-2026-121959 |
high | 7.1 | 0.0031 | 2026-11-04 | FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read th | |
CVE-2026-121958 |
high | 8.7 | 0.0030 | 2026-11-04 | FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the del | |
CVE-2026-121957 |
high | 8.7 | 0.0024 | 2026-11-04 | FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP se | |
CVE-2026-121956 |
high | 8.7 | 0.0043 | 2026-11-04 | FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt fu | |
CVE-2026-121955 |
high | 8.7 | 0.0034 | 2026-11-04 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseConte | |
CVE-2026-121954 |
high | 7.1 | 0.0035 | 2026-11-04 | FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_b | |
CVE-2026-121953 |
critical | 9.3 | 0.0056 | 2026-11-04 | FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: | |
CVE-2026-121952 |
critical | 9.3 | 0.0050 | 2026-11-04 | FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_bitmap_cach | |
CVE-2026-121951 |
high | 8.7 | 0.0042 | 2026-11-04 | FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of | |
CVE-2026-121950 |
high | 7.1 | 0.0034 | 2026-11-04 | FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_CreateSurfac | |
CVE-2026-119746 |
high | 8.2 | 0.0043 | 2026-11-04 | ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login lockout bypas | |
CVE-2026-109518 |
high | 7.7 | 0.0093 | 2026-11-04 | 3 PoC | On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipul |
CVE-2026-91393 |
low | 3.1 | 0.0012 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-91392 |
low | 3.7 | 0.0019 | 2026-11-04 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) | |
CVE-2026-91168 |
medium | 6.8 | 0.0028 | 2026-11-04 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until | |
CVE-2026-91163 |
low | 3.7 | 0.0017 | 2026-11-04 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, | |
CVE-2026-122032 |
high | 7.1 | 0.0034 | 2026-11-04 | SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attack | |
CVE-2026-42965 |
medium | 6.5 | 0.0040 | 2026-11-04 | A flaw was found in the OpenShift Router. A user with EndpointSlice write access can explo | |
CVE-2026-16527 |
high | 7.3 | 0.0059 | 2026-11-04 | An unauthenticated remote attacker can bypass access controls by sending crafted requests | |
CVE-2026-92704 |
high | 8.3 | 0.0016 | 2026-11-04 | SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3 | |
CVE-2026-66736 |
— | — | — | 2026-11-04 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-120421 |
medium | 6.1 | 0.0021 | 2026-11-04 | In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 throu | |
CVE-2026-100408 |
medium | 4.4 | 0.0012 | 2026-11-04 | Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, | |
CVE-2026-100407 |
medium | 4.4 | 0.0012 | 2026-11-04 | Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, | |
CVE-2026-101468 |
high | 7.5 | 0.0047 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud | |
CVE-2026-101465 |
medium | 6.3 | 0.0014 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server | |
CVE-2026-121009 |
high | 7.3 | 0.0019 | 2026-11-04 | SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard c | |
CVE-2026-121008 |
medium | 5.4 | 0.0015 | 2026-11-04 | SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via un | |
CVE-2026-121007 |
high | 7.3 | 0.0019 | 2026-11-04 | SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via th | |
CVE-2026-114627 |
medium | 6.1 | 0.0025 | 2026-11-04 | Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-q | |
CVE-2026-93579 |
medium | 6.5 | 0.0108 | 2026-11-04 | A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to i | |
CVE-2026-93568 |
high | 7.5 | 0.0108 | 2026-11-04 | A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending s | |
CVE-2026-93567 |
high | 7.5 | 0.0289 | 2026-11-04 | A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/ | |
CVE-2026-93492 |
medium | 5.3 | 0.0048 | 2026-11-04 | A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sen | |
CVE-2026-122007 |
high | 7.4 | 0.0038 | 2026-11-04 | Oqtane Framework before 10.3.0 contains a broken access control vulnerability in SettingCo | |
CVE-2026-121640 |
critical | 9.1 | 0.0047 | 2026-11-04 | An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway a | |
CVE-2026-121639 |
critical | 9.2 | 0.0067 | 2026-11-04 | A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gatew | |
CVE-2026-121638 |
critical | 9.1 | 0.0029 | 2026-11-04 | An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an | |
CVE-2026-121637 |
high | 8.9 | 0.0026 | 2026-11-04 | An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP auth | |
CVE-2026-122008 |
medium | 5.3 | 0.0026 | 2026-11-04 | Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the |