Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-121144 |
high | 8.8 | 0.0030 | 2026-11-04 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of | |
CVE-2026-121620 |
high | 8.3 | 0.0022 | 2026-11-04 | CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerabilit | |
CVE-2026-121145 |
high | 7.1 | 0.0021 | 2026-11-04 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficien | |
CVE-2026-118516 |
medium | 6.3 | 0.0045 | 2026-11-04 | The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and pa | |
CVE-2026-121147 |
high | 8.5 | 0.0009 | 2026-11-04 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper im | |
CVE-2026-121146 |
medium | 6.8 | 0.0012 | 2026-11-04 | This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recordi | |
CVE-2026-75883 |
medium | 6.8 | 0.0029 | 2026-11-04 | A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability | |
CVE-2026-16460 |
high | 7.4 | 0.0010 | 2026-11-04 | A flaw was found in bootc and ostree. Already-staged deployments are finalized without rev | |
CVE-2026-65555 |
critical | 9.8 | 0.0042 | 2026-11-04 | Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash | |
CVE-2026-119481 |
critical | 9.8 | 0.0042 | 2026-11-04 | Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder a | |
CVE-2026-119468 |
high | 7.1 | 0.0020 | 2026-11-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-118513 |
high | 7.7 | 0.0027 | 2026-11-04 | Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of S | |
CVE-2026-107479 |
low | 1.7 | 0.0016 | 2026-11-04 | An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Cor | |
CVE-2026-121925 |
medium | 6.6 | 0.0060 | 2026-11-04 | A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could | |
CVE-2026-102712 |
medium | 6.3 | 0.0025 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with DTLS ser | |
CVE-2026-97397 |
high | 7.2 | 0.0030 | 2026-11-04 | The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance | |
CVE-2026-59267 |
medium | 5.8 | 0.0021 | 2026-11-04 | A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 a | |
CVE-2026-114456 |
medium | 6.5 | 0.0022 | 2026-11-04 | Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single | |
CVE-2026-104799 |
high | 8.8 | 0.0039 | 2026-11-04 | The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versi | |
CVE-2026-90634 |
high | 7.3 | 0.0021 | 2026-11-04 | An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through | |
CVE-2026-90632 |
medium | 5.5 | 0.0022 | 2026-11-04 | Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted | |
CVE-2026-90631 |
low | 3.3 | 0.0021 | 2026-11-04 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Ap | |
CVE-2026-90629 |
high | 7.3 | 0.0021 | 2026-11-04 | An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through | |
CVE-2026-90628 |
high | 7.3 | 0.0023 | 2026-11-04 | An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through | |
CVE-2026-90627 |
medium | 5.5 | 0.0022 | 2026-11-04 | The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafte | |
CVE-2026-90626 |
high | 7.3 | 0.0021 | 2026-11-04 | An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through | |
CVE-2026-90624 |
high | 7.3 | 0.0021 | 2026-11-04 | An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4. | |
CVE-2026-59268 |
high | 7.3 | 0.0021 | 2026-11-04 | An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could al | |
CVE-2026-59264 |
high | 7.8 | 0.0022 | 2026-11-04 | The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulate | |
CVE-2026-59263 |
low | 1.9 | 0.0016 | 2026-11-04 | A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted | |
CVE-2026-102725 |
high | 7.1 | 0.0015 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP | |
CVE-2026-102724 |
high | 7.1 | 0.0015 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP | |
CVE-2026-102704 |
medium | 4.4 | 0.0014 | 2026-11-04 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vul | |
CVE-2026-102703 |
medium | 4.4 | 0.0014 | 2026-11-04 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vul | |
CVE-2026-102728 |
medium | 6.3 | 0.0024 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure TLS client | |
CVE-2026-102727 |
medium | 6.0 | 0.0024 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP server accepts the | |
CVE-2026-102726 |
high | 7.1 | 0.0015 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the PPP IPCP code parses a | |
CVE-2026-115448 |
high | 8.7 | 0.0061 | 2026-11-04 | Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snaps | |
CVE-2026-108500 |
medium | 6.5 | 0.0037 | 2026-11-04 | Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationM | |
CVE-2026-100300 |
high | 8.7 | 0.0049 | 2026-11-04 | Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper all | |
CVE-2026-100252 |
high | 8.6 | 0.0053 | 2026-11-04 | Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is ena | |
CVE-2026-100235 |
medium | 6.0 | 0.0034 | 2026-11-04 | Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in t | |
CVE-2026-100302 |
high | 7.1 | 0.0053 | 2026-11-04 | Allocation of Resources Without Limits or Throttling in the multiRead request handler of A | |
CVE-2026-12859 |
medium | 6.5 | 0.0020 | 2026-11-04 | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS | |
CVE-2026-12610 |
medium | 6.4 | 0.0012 | 2026-11-04 | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can c | |
CVE-2026-102723 |
high | 7.1 | 0.0015 | 2026-11-04 | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP | |
CVE-2026-108946 |
medium | 6.5 | 0.0039 | 2026-11-04 | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The | |
CVE-2026-103582 |
high | 7.5 | 0.0052 | 2026-11-04 | Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the | |
CVE-2026-120422 |
high | 8.9 | 0.0045 | 2026-11-04 | Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mec | |
CVE-2026-111822 |
high | 8.1 | 0.0036 | 2026-11-04 | Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache Ac |