Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-101464 |
high | 7.1 | 0.0018 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server | |
CVE-2026-101462 |
medium | 5.5 | 0.0018 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server | |
CVE-2026-101461 |
high | 7.5 | 0.0047 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server | |
CVE-2026-101460 |
high | 7.5 | 0.0044 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server | |
CVE-2026-101453 |
medium | 6.7 | 0.0017 | 2026-11-04 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server | |
CVE-2026-39430 |
critical | 9.8 | 0.0043 | 2026-11-04 | On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow i | |
CVE-2026-122006 |
critical | 9.8 | 0.0074 | 2026-11-04 | 1 PoC | The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment proces |
CVE-2026-119776 |
medium | 6.1 | 0.0040 | 2026-11-04 | In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not | |
CVE-2026-39431 |
high | 7.2 | 0.0102 | 2026-11-04 | On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a | |
CVE-2026-121632 |
medium | 6.1 | 0.0026 | 2026-11-04 | Data::MuForm versions through 0.05 for Perl render attribute values and option labels into | |
CVE-2026-13048 |
high | 8.2 | 0.0056 | 2026-11-04 | Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog | |
CVE-2024-7631 |
medium | 4.3 | 0.0052 | 2026-11-04 | A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in m | |
CVE-2026-119745 |
medium | 5.3 | 0.0023 | 2026-11-04 | Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability t | |
CVE-2026-118391 |
high | 8.9 | 0.0049 | 2026-11-04 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto all | |
CVE-2026-91372 |
low | 3.3 | 0.0015 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91371 |
medium | 5.8 | 0.0032 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91370 |
medium | 5.3 | 0.0032 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91369 |
medium | 5.3 | 0.0023 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91368 |
medium | 4.1 | 0.0014 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91367 |
medium | 6.5 | 0.0015 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91366 |
medium | 4.7 | 0.0020 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91365 |
medium | 5.9 | 0.0025 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-91364 |
medium | 6.8 | 0.0026 | 2026-11-04 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-87251 |
critical | 9.8 | 0.0049 | 2026-11-04 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: | |
CVE-2026-83397 |
critical | 9.8 | 0.0047 | 2026-11-04 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component | |
CVE-2026-83396 |
critical | 9.8 | 0.0047 | 2026-11-04 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component | |
CVE-2026-102730 |
high | 8.6 | 0.0012 | 2026-11-04 | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbo | |
CVE-2024-27834 |
medium | 5.5 | 0.0150 | 2026-11-04 | KEV | Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication |
CVE-2026-121993 |
medium | 5.3 | 0.0024 | 2026-11-04 | wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulner | |
CVE-2026-0637 |
medium | 5.4 | 0.0019 | 2026-11-04 | When a proxy server is configured with `customUrl.enabled`, the component accepts user-sup | |
CVE-2026-102715 |
high | 7.1 | 0.0031 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the mDNS add-on's s | |
CVE-2026-102714 |
high | 7.1 | 0.0015 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with IPv6, th | |
CVE-2026-106464 |
high | 8.7 | 0.0021 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the NetX Secure X.5 | |
CVE-2026-102718 |
high | 8.7 | 0.0032 | 2026-11-04 | 1 PoC | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the SNMP agent's OI |
CVE-2026-102716 |
high | 8.7 | 0.0025 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the RTSP server ret | |
CVE-2026-106465 |
medium | 6.9 | 0.0037 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603, the NetX Secure DTLS server | |
CVE-2026-121970 |
medium | 6.3 | 0.0019 | 2026-11-04 | Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper | |
CVE-2026-121373 |
medium | 5.3 | 0.0048 | 2026-11-04 | The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2 | |
CVE-2026-102713 |
high | 8.3 | 0.0025 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with packet c | |
CVE-2026-121946 |
medium | 6.9 | 0.0032 | 2026-11-04 | zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injecti | |
CVE-2026-121945 |
high | 7.2 | 0.0041 | 2026-11-04 | CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that | |
CVE-2026-121944 |
medium | 6.8 | 0.0024 | 2026-11-04 | sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() | |
CVE-2026-121943 |
medium | 6.3 | 0.0555 | 2026-11-04 | Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_che | |
CVE-2026-121942 |
medium | 6.9 | 0.0024 | 2026-11-04 | ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_decode() in | |
CVE-2026-121941 |
high | 8.5 | 0.0026 | 2026-11-04 | libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserI | |
CVE-2026-121940 |
high | 8.7 | 0.0045 | 2026-11-04 | Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnera | |
CVE-2026-121939 |
critical | 9.2 | 0.0054 | 2026-11-04 | Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService | |
CVE-2026-121938 |
medium | 6.0 | 0.0039 | 2026-11-04 | langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerabil | |
CVE-2026-121937 |
low | 2.3 | 0.0032 | 2026-11-04 | loonflow before r3.2.3 contains a missing authorization vulnerability in TicketFlowHistory | |
CVE-2026-121936 |
medium | 6.9 | 0.0035 | 2026-11-04 | easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows u |