Browse All CVEs
50,482 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120673 |
medium | 6.8 | 0.0010 | 2026-11-03 | A component of the MongoDB Rust Driver that records diagnostic tracing data can capture co | |
CVE-2026-92358 |
medium | 6.4 | 0.0030 | 2026-11-03 | A flaw was found in the first broker login flow of Keycloak. When a user confirms an accou | |
CVE-2026-5419 |
low | 3.7 | 0.0054 | 2026-11-03 | A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not | |
CVE-2026-107889 |
medium | 5.5 | 0.0032 | 2026-11-03 | A flaw was found in the login theme rendering component of Keycloak. The issue occurs beca | |
CVE-2026-103884 |
medium | 6.5 | 0.0030 | 2026-11-03 | A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distr | |
CVE-2026-82976 |
high | 7.1 | 0.0023 | 2026-11-03 | A flaw was found in the image-customization-controller used in OpenShift's bare metal prov | |
CVE-2026-63198 |
high | 7.3 | 0.0026 | 2026-11-03 | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, OAu | |
CVE-2026-46487 |
high | 7.5 | 0.0046 | 2026-11-03 | GeoNetwork is a catalog application to manage spatially referenced resources. From 4.0.0-a | |
CVE-2026-121652 |
medium | 4.8 | 0.0026 | 2026-11-03 | Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might | |
CVE-2026-121382 |
high | 7.7 | 0.0058 | 2026-11-03 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this iss | |
CVE-2026-120956 |
high | 7.1 | 0.0025 | 2026-11-03 | The MongoDB C Driver does not validate the type or format of a namespace field returned by | |
CVE-2026-120955 |
high | 8.7 | 0.0036 | 2026-11-03 | The GridFS file download API in the MongoDB C Driver does not check the result of an inter | |
CVE-2026-120954 |
medium | 6.3 | 0.0023 | 2026-11-03 | A weakness in the BSON library's handling of a specialized binary vector data type allows | |
CVE-2026-120684 |
medium | 6.0 | 0.0032 | 2026-11-03 | A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver ca | |
CVE-2026-120678 |
high | 8.7 | 0.0039 | 2026-11-03 | A memory management flaw in the MongoDB C Driver's handling of compressed responses may ca | |
CVE-2025-60676 |
medium | 6.5 | 0.0349 | 2026-11-03 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: | |
CVE-2026-39379 |
high | 7.1 | 0.0036 | 2026-11-03 | GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 u | |
CVE-2026-120953 |
medium | 5.1 | 0.0024 | 2026-11-03 | A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Dr | |
CVE-2026-83423 |
high | 8.8 | 0.0043 | 2026-11-03 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Sec | |
CVE-2026-83327 |
critical | 9.8 | 0.0049 | 2026-11-03 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (com | |
CVE-2026-83232 |
critical | 9.8 | 0.0051 | 2026-11-03 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component | |
CVE-2025-3155 |
high | 7.4 | 0.1312 | 2026-11-03 | A flaw was found in Yelp. The Gnome user help application allows the help document to exec | |
CVE-2025-1244 |
high | 8.8 | 0.0263 | 2026-11-03 | A command injection flaw was found in the text editor Emacs. It could allow a remote, unau | |
CVE-2006-5610 |
— | — | 0.0136 | 2026-11-03 | PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing | |
CVE-2026-57154 |
high | 8.1 | 0.0046 | 2026-11-03 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, | |
CVE-2026-93683 |
medium | 6.4 | 0.0011 | 2026-11-03 | A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor tab | |
CVE-2026-86856 |
medium | 6.5 | 0.0017 | 2026-11-03 | A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single qu | |
CVE-2026-86849 |
medium | 6.5 | 0.0014 | 2026-11-03 | A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, | |
CVE-2026-86847 |
medium | 6.5 | 0.0020 | 2026-11-03 | A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an un | |
CVE-2026-86846 |
medium | 6.5 | 0.0019 | 2026-11-03 | A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descript | |
CVE-2026-86845 |
medium | 6.5 | 0.0017 | 2026-11-03 | A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached | |
CVE-2026-86566 |
medium | 6.5 | 0.0017 | 2026-11-03 | A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the cop | |
CVE-2026-86561 |
medium | 6.5 | 0.0019 | 2026-11-03 | A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap du | |
CVE-2026-119922 |
high | 8.7 | 0.0055 | 2026-11-03 | Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2. | |
CVE-2024-12747 |
medium | 5.6 | 0.0039 | 2026-11-03 | A flaw was found in rsync. This vulnerability arises from a race condition during rsync's | |
CVE-2024-12088 |
high | 7.5 | 0.0465 | 2026-11-03 | A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to | |
CVE-2024-12087 |
medium | 6.5 | 0.0226 | 2026-11-03 | A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--i | |
CVE-2026-63417 |
high | 8.2 | 0.0030 | 2026-11-03 | Logging Redactor is a Python library designed to redact sensitive data in logs based on re | |
CVE-2026-63197 |
high | 7.3 | 0.0029 | 2026-11-03 | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, ins | |
CVE-2026-63499 |
medium | 6.9 | 0.0028 | 2026-11-03 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. P | |
CVE-2026-63494 |
— | — | — | 2026-11-03 | Rejected reason: This CVE is a duplicate of another CVE. | |
CVE-2026-63492 |
— | — | — | 2026-11-03 | Rejected reason: This CVE is a duplicate of another CVE. | |
CVE-2026-63436 |
medium | 6.1 | 0.0024 | 2026-11-03 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. P | |
CVE-2026-63418 |
high | 7.0 | 0.0014 | 2026-11-03 | Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until | |
CVE-2026-91495 |
critical | 9.8 | 0.0047 | 2026-11-03 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-87400 |
medium | 6.9 | 0.0024 | 2026-11-03 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-86848 |
high | 8.8 | 0.0010 | 2026-11-03 | A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-f | |
CVE-2026-109964 |
medium | 6.3 | 0.0034 | 2026-11-03 | ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability | |
CVE-2026-109282 |
low | 2.0 | 0.0011 | 2026-11-03 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the | |
CVE-2026-109281 |
medium | 4.8 | 0.0012 | 2026-11-03 | ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of t |