Browse All CVEs
50,476 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-119215 |
high | 7.6 | 0.0050 | 2026-11-03 | Authorization Bypass Through User-Controlled Key vulnerability in team-alembic ash_authent | |
CVE-2026-118505 |
medium | 6.3 | 0.0058 | 2026-11-03 | Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic as | |
CVE-2026-101495 |
high | 8.8 | 0.0021 | 2026-11-03 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebe | |
CVE-2026-101455 |
medium | 6.3 | 0.0013 | 2026-11-03 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integ | |
CVE-2026-3303 |
low | 3.7 | 0.0022 | 2026-11-03 | IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow | |
CVE-2026-1510 |
medium | 4.7 | 0.0013 | 2026-11-03 | IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. | |
CVE-2026-1501 |
low | 3.7 | 0.0009 | 2026-11-03 | IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. | |
CVE-2026-6930 |
high | 7.5 | 0.0015 | 2026-11-03 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that coul | |
CVE-2023-20577 |
high | 7.4 | 0.0015 | 2026-11-03 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability | |
CVE-2026-73328 |
high | 8.6 | 0.0071 | 2026-11-03 | Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vuln | |
CVE-2026-121562 |
medium | 6.9 | 0.0033 | 2026-11-03 | CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/te | |
CVE-2026-121561 |
medium | 6.3 | 0.0043 | 2026-11-03 | Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request | |
CVE-2026-121560 |
high | 7.1 | 0.0045 | 2026-11-03 | LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that al | |
CVE-2026-121559 |
high | 8.6 | 0.0049 | 2026-11-03 | GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulne | |
CVE-2026-121558 |
low | 2.3 | 0.0030 | 2026-11-03 | AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metada | |
CVE-2026-121557 |
high | 8.2 | 0.0041 | 2026-11-03 | WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that all | |
CVE-2026-121556 |
high | 8.7 | 0.0044 | 2026-11-03 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in Produc | |
CVE-2026-121555 |
high | 8.7 | 0.0058 | 2026-11-03 | Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenti | |
CVE-2026-121554 |
high | 8.2 | 0.0048 | 2026-11-03 | cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulner | |
CVE-2026-121553 |
medium | 6.3 | 0.0036 | 2026-11-03 | Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(m | |
CVE-2026-121552 |
medium | 5.3 | 0.0036 | 2026-11-03 | Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the P | |
CVE-2026-121551 |
medium | 5.1 | 0.0028 | 2026-11-03 | PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allow | |
CVE-2026-121550 |
low | 1.0 | 0.0012 | 2026-11-03 | nnn through 5.3 contains an insecure file handling vulnerability that allows local attacke | |
CVE-2026-121549 |
medium | 4.1 | 0.0011 | 2026-11-03 | nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke | |
CVE-2026-121548 |
high | 8.4 | 0.0115 | 2026-11-03 | Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex th | |
CVE-2026-121547 |
low | 1.0 | 0.0014 | 2026-11-03 | Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that a | |
CVE-2026-121546 |
medium | 6.0 | 0.0040 | 2026-11-03 | ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that | |
CVE-2026-121545 |
medium | 6.9 | 0.0021 | 2026-11-03 | Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookReques | |
CVE-2026-121544 |
medium | 6.9 | 0.0064 | 2026-11-03 | Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP | |
CVE-2026-121543 |
high | 8.7 | 0.0049 | 2026-11-03 | smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFil | |
CVE-2026-121455 |
medium | 5.3 | 0.0025 | 2026-11-03 | DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection- | |
CVE-2026-121454 |
medium | 6.3 | 0.0034 | 2026-11-03 | Padloc before 4.3.1 contains a missing authentication vulnerability in ScimServer._handleS | |
CVE-2026-121453 |
medium | 5.1 | 0.0044 | 2026-11-03 | SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint t | |
CVE-2026-121452 |
high | 8.3 | 0.0024 | 2026-11-03 | bbs-go through 4.4.6 contains an improper certificate validation vulnerability that allows | |
CVE-2026-121451 |
high | 8.7 | 0.0029 | 2026-11-03 | AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in i | |
CVE-2026-121450 |
high | 7.7 | 0.0026 | 2026-11-03 | CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows sub | |
CVE-2026-101492 |
medium | 4.7 | 0.0011 | 2026-11-03 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open | |
CVE-2026-101451 |
high | 8.7 | 0.0016 | 2026-11-03 | Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI) | |
CVE-2026-97350 |
medium | 6.9 | 0.0018 | 2026-11-03 | Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenV | |
CVE-2026-65108 |
medium | 6.3 | 0.0014 | 2026-11-03 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd | |
CVE-2026-65107 |
medium | 6.3 | 0.0012 | 2026-11-03 | NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list | |
CVE-2026-121564 |
low | 1.8 | 0.0034 | 2026-11-03 | Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat | |
CVE-2026-120754 |
low | 1.9 | 0.0014 | 2026-11-03 | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scal | |
CVE-2026-43603 |
medium | 6.9 | 0.0016 | 2026-11-03 | A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel cras | |
CVE-2026-40661 |
medium | 5.2 | 0.0014 | 2026-11-03 | An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attack | |
CVE-2026-40660 |
medium | 5.2 | 0.0014 | 2026-11-03 | A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could al | |
CVE-2026-40659 |
medium | 5.1 | 0.0014 | 2026-11-03 | An integer overflow condition in the AMD Compressonator SDK could allow an attacker with l | |
CVE-2026-40652 |
medium | 5.2 | 0.0014 | 2026-11-03 | An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with | |
CVE-2026-118488 |
medium | 5.9 | 0.0043 | 2026-11-03 | In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keep | |
CVE-2026-110265 |
medium | 6.5 | 0.0034 | 2026-11-03 | A specially crafted malformed search query could return results from outside a user's orga |