Browse All CVEs
50,476 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-99259 |
— | — | 0.0018 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix u | |
CVE-2026-99258 |
— | — | 0.0019 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Avoid usi | |
CVE-2026-99257 |
— | — | 0.0018 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefu | |
CVE-2026-99256 |
— | — | 0.0020 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue w | |
CVE-2026-99255 |
— | — | 0.0020 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't | |
CVE-2026-99254 |
— | — | 0.0020 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood | |
CVE-2026-99253 |
— | — | 0.0019 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: rear | |
CVE-2026-99252 |
— | — | 0.0018 | 2026-11-03 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-114442 |
medium | 6.5 | 0.0047 | 2026-11-03 | Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expr | |
CVE-2024-9666 |
medium | 4.7 | 0.0040 | 2026-11-03 | A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a d | |
CVE-2024-8883 |
medium | 6.1 | 0.0211 | 2026-11-03 | A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirec | |
CVE-2026-89292 |
critical | 9.2 | 0.0045 | 2026-11-03 | In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for | |
CVE-2026-77777 |
high | 7.1 | 0.0075 | 2026-11-03 | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access co | |
CVE-2026-89293 |
high | 8.8 | 0.0046 | 2026-11-03 | In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for | |
CVE-2026-77778 |
high | 7.1 | 0.0040 | 2026-11-03 | ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to ex | |
CVE-2026-119724 |
high | 7.5 | 0.0044 | 2026-11-03 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTD | |
CVE-2026-119641 |
medium | 6.5 | 0.0037 | 2026-11-03 | ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. A | |
CVE-2026-89229 |
medium | 5.1 | 0.0019 | 2026-11-03 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Shar | |
CVE-2026-119843 |
medium | 6.5 | 0.0056 | 2026-11-03 | A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not p | |
CVE-2026-77691 |
high | 8.1 | 0.0139 | 2026-11-03 | ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to e | |
CVE-2026-120333 |
high | 8.8 | 0.0039 | 2026-11-03 | The actions linked in the emails of the extension (e.g. to confirm a registration or the d | |
CVE-2026-120332 |
medium | 5.1 | 0.0031 | 2026-11-03 | The HTML content of mails and tracked URLs are rendered unescaped in the backend module. B | |
CVE-2026-120331 |
medium | 5.3 | 0.0027 | 2026-11-03 | Content of external URL mails, their stylesheets and images to embed is fetched by the ser | |
CVE-2026-120330 |
high | 7.1 | 0.0036 | 2026-11-03 | Backend actions and ajax routes of the mail module do not check whether the backend user h | |
CVE-2026-120329 |
medium | 5.3 | 0.0031 | 2026-11-03 | Saving the configuration of the mail backend module writes submitted settings to the page | |
CVE-2026-120328 |
medium | 6.9 | 0.0040 | 2026-11-03 | The click tracking middleware does not validate the authentication code of a recipient if | |
CVE-2026-120327 |
medium | 5.3 | 0.0034 | 2026-11-03 | The click tracking middleware accepts an arbitrary target URL and redirects to it. Attacke | |
CVE-2026-118448 |
medium | 6.9 | 0.0010 | 2026-11-03 | A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_t | |
CVE-2026-118447 |
medium | 4.8 | 0.0010 | 2026-11-03 | A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose | |
CVE-2026-118446 |
medium | 6.9 | 0.0010 | 2026-11-03 | A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued memb | |
CVE-2026-118445 |
medium | 6.9 | 0.0010 | 2026-11-03 | A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued | |
CVE-2026-118444 |
medium | 4.8 | 0.0010 | 2026-11-03 | Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent | |
CVE-2026-109161 |
medium | 6.9 | 0.0030 | 2026-11-03 | Insufficient bounds checking in the Digital I/O function may allow a remote attacker with | |
CVE-2026-105982 |
high | 8.6 | 0.0047 | 2026-11-03 | Improper input validation in the IPsec VPN function may allow a remote attacker with high | |
CVE-2026-105981 |
high | 8.6 | 0.0036 | 2026-11-03 | Improper input validation in the Digital I/O function may allow a remote attacker with hig | |
CVE-2026-105980 |
high | 8.6 | 0.0036 | 2026-11-03 | Improper input validation in the WireGuard VPN function may allow a remote attacker with h | |
CVE-2026-105979 |
high | 8.6 | 0.0036 | 2026-11-03 | Improper input validation in the ZeroTier VPN function may allow a remote attacker with hi | |
CVE-2026-92610 |
critical | 9.8 | 0.0040 | 2026-11-03 | In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolv | |
CVE-2026-121022 |
critical | 9.2 | 0.0038 | 2026-11-03 | Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 o | |
CVE-2026-121021 |
medium | 6.8 | 0.0009 | 2026-11-03 | Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in A | |
CVE-2026-121020 |
medium | 5.3 | 0.0022 | 2026-11-03 | Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security confi | |
CVE-2026-121024 |
medium | 5.3 | 0.0021 | 2026-11-03 | Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet b | |
CVE-2026-121023 |
medium | 6.8 | 0.0010 | 2026-11-03 | Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in A | |
CVE-2026-105978 |
high | 8.6 | 0.0036 | 2026-11-03 | Improper input validation in management control functions may allow a remote attacker with | |
CVE-2026-91075 |
medium | 5.3 | 0.0011 | 2026-11-03 | The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0 before 4.7.6 does not verif | |
CVE-2026-115231 |
high | 8.5 | 0.0011 | 2026-11-03 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mod | |
CVE-2026-113421 |
high | 7.3 | 0.0011 | 2026-11-03 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a | |
CVE-2026-103327 |
medium | 5.3 | 0.0011 | 2026-11-03 | The CryptoCloud WordPress plugin from 3.0.0 through 3.0.1 does not verify the authenticity | |
CVE-2026-4052 |
critical | 9.8 | 0.0036 | 2026-11-03 | This issue only impacts deployments where WSO2 Identity Server is configured as a Resident | |
CVE-2026-13594 |
critical | 9.1 | 0.0114 | 2026-11-03 | Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are |