Browse All CVEs
50,476 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85033 |
medium | 4.6 | 0.0022 | 2026-11-03 | The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent | |
CVE-2026-85032 |
medium | 4.8 | 0.0018 | 2026-11-03 | The MCTP over USB device class in subsys/pmci/mctp/mctp_usb.c splits RX handling across tw | |
CVE-2026-119179 |
high | 8.3 | 0.0030 | 2026-11-03 | A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled | |
CVE-2026-119742 |
high | 8.6 | 0.0409 | 2026-11-03 | Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload f | |
CVE-2026-1961 |
high | 8.0 | 0.0196 | 2026-11-03 | 1 PoC | A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerabi |
CVE-2026-101544 |
high | 7.0 | 0.0010 | 2026-11-03 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101539 |
medium | 6.5 | 0.0035 | 2026-11-03 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Interna | |
CVE-2026-101292 |
high | 8.2 | 0.0052 | 2026-11-03 | Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in Feder | |
CVE-2026-65160 |
medium | 5.5 | 0.0016 | 2026-11-03 | NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A s | |
CVE-2026-121458 |
high | 7.1 | 0.0031 | 2026-11-03 | Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP conten | |
CVE-2025-49521 |
high | 8.8 | 0.0060 | 2026-11-03 | A flaw was found in the EDA component of the Ansible Automation Platform, where user-suppl | |
CVE-2025-49520 |
high | 8.8 | 0.0062 | 2026-11-03 | A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git UR | |
CVE-2026-108060 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108059 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108058 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108057 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108056 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108055 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108054 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108053 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108052 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108051 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108050 |
medium | 5.1 | 0.0030 | 2026-11-03 | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery no | |
CVE-2026-108049 |
medium | 5.1 | 0.0042 | 2026-11-03 | Clickjacking vulnerability in the Alosuite web application. The affected login interface c | |
CVE-2026-108048 |
medium | 6.9 | 0.0040 | 2026-11-03 | Vulnerability due to a lack of request limits in Alosuite’s password recovery functionalit | |
CVE-2026-108047 |
high | 8.6 | 0.0028 | 2026-11-03 | Inadequate authorization vulnerability in Alosuite’s user invitation functionality. The ‘/ | |
CVE-2026-108046 |
medium | 6.9 | 0.0039 | 2026-11-03 | Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization | |
CVE-2026-99270 |
high | 8.1 | 0.0040 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UA | |
CVE-2026-76124 |
high | 8.8 | 0.0044 | 2026-11-03 | The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versi | |
CVE-2024-7885 |
high | 7.5 | 0.0264 | 2026-11-03 | A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same | |
CVE-2026-42784 |
high | 7.4 | 0.0035 | 2026-11-03 | A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older ce | |
CVE-2026-99269 |
high | 7.8 | 0.0015 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for S | |
CVE-2026-99268 |
— | — | 0.0019 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99267 |
— | — | 0.0019 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99266 |
— | — | 0.0019 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99265 |
— | — | 0.0019 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99264 |
high | 7.8 | 0.0016 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99263 |
— | — | 0.0020 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99262 |
— | — | 0.0020 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99251 |
— | — | 0.0016 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid in | |
CVE-2026-99250 |
— | — | 0.0016 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthr | |
CVE-2026-99249 |
— | — | 0.0016 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: pid_namespace: make z | |
CVE-2026-99248 |
— | — | 0.0014 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore no | |
CVE-2026-99247 |
— | — | 0.0016 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initi | |
CVE-2026-99246 |
high | 8.1 | 0.0044 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: tipc: protect node re | |
CVE-2026-99245 |
— | — | 0.0022 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_ | |
CVE-2026-99244 |
— | — | 0.0020 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: pid_namespace: preven | |
CVE-2026-99243 |
— | — | 0.0020 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-99261 |
— | — | 0.0018 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct r | |
CVE-2026-99260 |
— | — | 0.0018 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident co |