Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-12522 |
high | 8.8 | 0.0034 | 2026-11-04 | The HL7800 cellular modem driver's +CGCONTRDP: response handler on_cmd_atcmdinfo_ipaddr() | |
CVE-2026-12520 |
medium | 6.4 | 0.0029 | 2026-11-04 | The Sierra Wireless HL7800 cellular modem driver (drivers/modem/vendor_standalone/hl7800.c | |
CVE-2026-12364 |
high | 8.4 | 0.0016 | 2026-11-04 | The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log | |
CVE-2026-12363 |
medium | 4.2 | 0.0024 | 2026-11-04 | The LoRaWAN Fragmented Data Block Transport service (subsys/lorawan/services/frag_transpor | |
CVE-2026-105296 |
medium | 5.1 | 0.0012 | 2026-11-04 | Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a ma | |
CVE-2026-95210 |
medium | 4.8 | 0.0020 | 2026-11-04 | GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, | |
CVE-2026-95184 |
medium | 5.9 | 0.0021 | 2026-11-04 | GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted | |
CVE-2026-67693 |
low | 3.7 | 0.0017 | 2026-11-04 | GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory | |
CVE-2026-88647 |
medium | 6.5 | 0.0024 | 2026-11-04 | GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name wh | |
CVE-2026-95209 |
medium | 5.9 | 0.0024 | 2026-11-04 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: | |
CVE-2026-39892 |
medium | 6.9 | 0.0068 | 2026-11-04 | cryptography is a package designed to expose cryptographic primitives and recipes to Pytho | |
CVE-2026-80335 |
high | 7.6 | 0.0024 | 2026-11-04 | Memory Corruption when processing firmware update data in Download mode due to a missing b | |
CVE-2026-79405 |
high | 7.5 | 0.0046 | 2026-11-04 | Transient DOS when processing a malformed NR RRC configuration message due to improper inp | |
CVE-2026-121803 |
critical | 9.3 | — | 2026-11-04 | Rejected reason: This CVE ID is a duplicate of CVE-2026-80335 (VULN-002 dl_download_midst) | |
CVE-2026-121618 |
medium | 5.5 | 0.0075 | 2026-11-04 | A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of | |
CVE-2026-121616 |
medium | 5.5 | 0.0030 | 2026-11-04 | A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability i | |
CVE-2026-121802 |
critical | 9.1 | 0.0020 | 2026-11-04 | @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenti | |
CVE-2026-121617 |
high | 7.7 | 0.0047 | 2026-11-04 | A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is t | |
CVE-2026-121615 |
critical | 9.3 | 0.0075 | 2026-11-04 | A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function | |
CVE-2026-84730 |
high | 8.7 | 0.0034 | 2026-11-04 | Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated near | |
CVE-2026-84729 |
high | 7.2 | 0.0017 | 2026-11-04 | Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attack | |
CVE-2026-121610 |
medium | 5.5 | 0.0025 | 2026-11-04 | A security flaw has been discovered in funadmin 7.1.0. Impacted is the function Curd::sele | |
CVE-2026-112116 |
high | 8.5 | 0.0011 | 2026-11-04 | An exposed IOCTL with insufficient access control in ASUS System Control Interface allows | |
CVE-2026-110464 |
medium | 6.9 | 0.0009 | 2026-11-04 | Missing authorization in ASUS Armoury Crate allows a local attacker to write content into | |
CVE-2026-121608 |
medium | 5.5 | 0.0131 | 2026-11-04 | A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vu | |
CVE-2026-121609 |
critical | 9.3 | 0.0050 | 2026-11-04 | A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue a | |
CVE-2026-121607 |
critical | 9.3 | 0.0199 | 2026-11-04 | A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This a | |
CVE-2026-121606 |
critical | 10.0 | 0.0024 | 2026-11-04 | A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 | |
CVE-2026-121599 |
high | 8.6 | 0.0047 | 2026-11-04 | A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the fu | |
CVE-2026-121598 |
critical | 9.4 | 0.0047 | 2026-11-04 | A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This | |
CVE-2026-121600 |
critical | 9.4 | 0.0047 | 2026-11-04 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerab | |
CVE-2026-121597 |
critical | 9.4 | 0.0060 | 2026-11-04 | A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the | |
CVE-2026-121585 |
low | 2.1 | 0.0024 | 2026-11-04 | A security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2. This imp | |
CVE-2026-91149 |
high | 7.5 | 0.0061 | 2026-11-04 | A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerabi | |
CVE-2026-120651 |
high | 7.5 | 0.0040 | 2026-11-04 | CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DIS | |
CVE-2026-120650 |
medium | 6.5 | 0.0038 | 2026-11-04 | CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or une | |
CVE-2026-120648 |
medium | 6.1 | 0.0022 | 2026-11-04 | CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment. | |
CVE-2026-120647 |
critical | 9.8 | 0.0052 | 2026-11-04 | CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unesca | |
CVE-2026-120646 |
high | 7.5 | 0.0047 | 2026-11-04 | CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string der | |
CVE-2026-120645 |
high | 7.5 | 0.0050 | 2026-11-04 | CGI versions before 5.00 for Perl allow denial of service via submitted values used as a r | |
CVE-2026-120644 |
critical | 9.1 | 0.0042 | 2026-11-04 | CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated | |
CVE-2026-120643 |
medium | 6.1 | 0.0027 | 2026-11-04 | CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostroph | |
CVE-2026-120642 |
critical | 9.1 | 0.0042 | 2026-11-04 | CGI versions before 5.00 for Perl return request-derived values untainted under taint mode | |
CVE-2026-120641 |
high | 8.8 | 0.0051 | 2026-11-04 | CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, i | |
CVE-2026-120640 |
medium | 6.5 | 0.0017 | 2026-11-04 | CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model | |
CVE-2026-120639 |
high | 7.2 | 0.0031 | 2026-11-04 | CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after th | |
CVE-2026-120638 |
medium | 6.1 | 0.0026 | 2026-11-04 | CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL | |
CVE-2026-120637 |
critical | 9.8 | 0.0053 | 2026-11-04 | CGI versions before 5.00 for Perl take request parameters from the process command line ar | |
CVE-2026-120636 |
medium | 6.1 | 0.0026 | 2026-11-04 | CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built | |
CVE-2026-120635 |
high | 8.1 | 0.0051 | 2026-11-04 | CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs v |