Browse All CVEs
50,476 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119673 |
low | 1.0 | 0.0015 | 2026-11-03 | MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when | |
CVE-2026-119672 |
medium | 5.9 | 0.0023 | 2026-11-03 | MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output des | |
CVE-2026-102710 |
high | 8.5 | 0.0010 | 2026-11-03 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, | |
CVE-2026-28336 |
critical | 9.9 | 0.0163 | 2026-11-03 | SolarWinds Dameware was found to be affected by a command injection vulnerability that cou | |
CVE-2026-28335 |
high | 8.4 | 0.0104 | 2026-11-03 | SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can r | |
CVE-2026-28327 |
high | 8.2 | 0.0021 | 2026-11-03 | SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack | |
CVE-2026-119674 |
low | 2.1 | 0.0016 | 2026-11-03 | MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name re | |
CVE-2026-103916 |
high | 8.4 | 0.0021 | 2026-11-03 | Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A m | |
CVE-2026-121604 |
medium | 4.8 | 0.0011 | 2026-11-03 | wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() | |
CVE-2026-121603 |
high | 8.5 | 0.0076 | 2026-11-03 | Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that a | |
CVE-2026-121602 |
high | 8.5 | 0.0084 | 2026-11-03 | Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that all | |
CVE-2026-121588 |
medium | 5.3 | 0.0019 | 2026-11-03 | TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability tha | |
CVE-2026-121587 |
medium | 6.9 | 0.0027 | 2026-11-03 | Coolify before 4.1.1 contains an information disclosure vulnerability that allows unauthen | |
CVE-2026-109594 |
medium | 6.8 | 0.0038 | 2026-11-03 | Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('S | |
CVE-2026-109593 |
critical | 9.1 | 0.0052 | 2026-11-03 | An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier ver | |
CVE-2026-101456 |
medium | 6.0 | 0.0017 | 2026-11-03 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Confi | |
CVE-2026-101454 |
medium | 6.1 | 0.0014 | 2026-11-03 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Confi | |
CVE-2026-101448 |
medium | 5.3 | 0.0032 | 2026-11-03 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel | |
CVE-2026-109261 |
medium | 6.3 | 0.0042 | 2026-11-03 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF enc | |
CVE-2026-109260 |
medium | 6.3 | 0.0042 | 2026-11-03 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG enc | |
CVE-2026-17472 |
critical | 9.6 | 0.0043 | 2026-11-03 | IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or m | |
CVE-2026-17465 |
medium | 6.5 | 0.0050 | 2026-11-03 | IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a den | |
CVE-2026-16426 |
medium | 5.4 | 0.0017 | 2026-11-03 | IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This | |
CVE-2026-15915 |
medium | 5.5 | 0.0011 | 2026-11-03 | IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive informati | |
CVE-2025-36084 |
high | 7.5 | 0.0016 | 2026-11-03 | IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that co | |
CVE-2025-12767 |
medium | 5.3 | 0.0049 | 2026-11-03 | IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service | |
CVE-2026-2950 |
medium | 5.3 | 0.0034 | 2026-11-03 | The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix | |
CVE-2026-101447 |
high | 7.1 | 0.0014 | 2026-11-03 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workf | |
CVE-2026-121260 |
high | 8.5 | 0.0086 | 2026-11-03 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects | |
CVE-2026-119741 |
high | 8.7 | 0.0063 | 2026-11-03 | rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender | |
CVE-2026-90959 |
high | 8.1 | 0.0053 | 2026-11-03 | A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fi | |
CVE-2026-65168 |
high | 7.0 | 0.0015 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd | |
CVE-2026-65165 |
medium | 5.3 | 0.0013 | 2026-11-03 | NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided n | |
CVE-2026-65140 |
medium | 5.7 | 0.0013 | 2026-11-03 | NVIDIA Slurm contains some inconsistent authorization checks against the Operator permissi | |
CVE-2026-65139 |
medium | 6.3 | 0.0017 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs | |
CVE-2026-65138 |
medium | 6.3 | 0.0015 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socke | |
CVE-2026-65109 |
medium | 4.7 | 0.0014 | 2026-11-03 | NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that c | |
CVE-2026-121578 |
medium | 6.1 | 0.0031 | 2026-11-03 | Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or e | |
CVE-2026-120758 |
medium | 5.4 | 0.0014 | 2026-11-03 | HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() i | |
CVE-2026-120757 |
medium | 6.9 | 0.0015 | 2026-11-03 | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse( | |
CVE-2026-120756 |
low | 1.9 | 0.0018 | 2026-11-03 | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserializ | |
CVE-2026-120755 |
medium | 4.7 | 0.0014 | 2026-11-03 | HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in s | |
CVE-2026-114582 |
medium | 6.9 | 0.0043 | 2026-11-03 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2. | |
CVE-2026-113733 |
low | 2.1 | 0.0039 | 2026-11-03 | An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.10. The `django.cont | |
CVE-2026-113593 |
low | 2.3 | 0.0046 | 2026-11-03 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2. | |
CVE-2026-111362 |
medium | 6.9 | 0.0053 | 2026-11-03 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2. | |
CVE-2026-111211 |
medium | 6.9 | 0.0053 | 2026-11-03 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2. | |
CVE-2026-108147 |
medium | 6.9 | 0.0058 | 2026-11-03 | An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before | |
CVE-2026-118487 |
high | 7.5 | 0.0066 | 2026-11-03 | In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-s | |
CVE-2026-102709 |
high | 8.4 | 0.0010 | 2026-11-03 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secur |