Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-117082 |
— | — | 0.0020 | 2026-11-02 | An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of | |
CVE-2026-120497 |
medium | 4.6 | 0.0025 | 2026-11-02 | Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability C | |
CVE-2026-120067 |
medium | 5.9 | 0.0035 | 2026-11-02 | For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for ta | |
CVE-2026-120066 |
medium | 5.3 | 0.0011 | 2026-11-02 | On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by d | |
CVE-2026-120065 |
high | 7.1 | 0.0029 | 2026-11-02 | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, | |
CVE-2026-120064 |
high | 7.5 | 0.0034 | 2026-11-02 | Several psqlODBC entry points use an application-supplied column number or row index as an | |
CVE-2026-120063 |
medium | 5.9 | 0.0027 | 2026-11-02 | When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check | |
CVE-2026-120062 |
high | 7.5 | 0.0036 | 2026-11-02 | SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its cata | |
CVE-2026-120061 |
high | 7.5 | 0.0034 | 2026-11-02 | The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument | |
CVE-2026-120060 |
medium | 5.9 | 0.0022 | 2026-11-02 | psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses | |
CVE-2026-120059 |
medium | 6.8 | 0.0026 | 2026-11-02 | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, | |
CVE-2026-120058 |
high | 7.5 | 0.0026 | 2026-11-02 | psqlODBC sizes its row cache from the column count of a cursor's first result, but recompu | |
CVE-2026-120057 |
high | 7.5 | 0.0024 | 2026-11-02 | psqlODBC copies the reply to a large-object read (loread) into the application's buffer us | |
CVE-2026-119736 |
high | 8.8 | 0.0029 | 2026-11-02 | Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier c | |
CVE-2026-119735 |
medium | 5.1 | 0.0019 | 2026-11-02 | Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerabili | |
CVE-2026-119734 |
high | 7.1 | 0.0024 | 2026-11-02 | Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulne | |
CVE-2026-119733 |
high | 7.2 | 0.0033 | 2026-11-02 | Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in | |
CVE-2026-119732 |
high | 7.1 | 0.0021 | 2026-11-02 | Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulne | |
CVE-2026-117127 |
high | 7.5 | 0.0113 | 2026-11-02 | Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to ob | |
CVE-2026-105606 |
critical | 9.5 | 0.0036 | 2026-11-02 | Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables | |
CVE-2026-112261 |
high | 7.8 | 0.0017 | 2026-11-02 | A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load | |
CVE-2026-112260 |
high | 7.1 | 0.0017 | 2026-11-02 | A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can c | |
CVE-2026-112258 |
high | 7.8 | 0.0017 | 2026-11-02 | A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channe | |
CVE-2026-112257 |
high | 7.8 | 0.0018 | 2026-11-02 | A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel | |
CVE-2026-112177 |
high | 7.3 | 0.0036 | 2026-11-02 | A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction | |
CVE-2026-106062 |
high | 7.8 | 0.0016 | 2026-11-02 | A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loa | |
CVE-2022-27779 |
medium | 5.3 | 0.0278 | 2026-11-02 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is p | |
CVE-2026-105605 |
medium | 5.3 | 0.0029 | 2026-11-02 | Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access | |
CVE-2026-105604 |
critical | 9.3 | 0.0035 | 2026-11-02 | Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3 | |
CVE-2026-84724 |
medium | 6.6 | 0.0029 | 2026-11-02 | An argument-injection flaw was found in the Ansible Automation Platform automation-control | |
CVE-2026-80185 |
medium | 5.7 | 0.0029 | 2026-11-02 | BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (lo | |
CVE-2026-56097 |
medium | 6.5 | 0.0029 | 2026-11-02 | A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat | |
CVE-2026-12545 |
medium | 6.7 | 0.0052 | 2026-11-02 | A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer | |
CVE-2026-12542 |
high | 7.8 | 0.0056 | 2026-11-02 | A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injectio | |
CVE-2026-67186 |
— | — | — | 2026-11-02 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-120656 |
high | 7.5 | 0.0027 | 2026-11-02 | OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, o | |
CVE-2026-95519 |
high | 7.8 | 0.0019 | 2026-11-02 | A flaw was found in rpm. An attacker can supply a crafted manifest file that, when process | |
CVE-2026-71465 |
low | 3.1 | 0.0021 | 2026-11-02 | RunAdHocCommand.build_args() appends limit as bare positional (args.append(l | |
CVE-2026-71464 |
low | 3.1 | 0.0021 | 2026-11-02 | LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() le | |
CVE-2026-16517 |
low | 2.9 | 0.0010 | 2026-11-02 | A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archi | |
CVE-2026-15028 |
low | 3.9 | 0.0020 | 2026-11-02 | A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a h | |
CVE-2026-119731 |
high | 8.7 | 0.0027 | 2026-11-02 | Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its sub | |
CVE-2026-117069 |
high | 7.5 | 0.0045 | 2026-11-02 | An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF | |
CVE-2017-20266 |
high | 8.8 | 0.0041 | 2026-11-02 | Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthent | |
CVE-2025-4416 |
high | 7.5 | 0.0042 | 2026-11-02 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Tr | |
CVE-2026-12541 |
high | 8.2 | 0.0124 | 2026-11-02 | A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rak | |
CVE-2026-12540 |
high | 8.2 | 0.0124 | 2026-11-02 | A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake | |
CVE-2026-12423 |
high | 7.5 | 0.0038 | 2026-11-02 | A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is v | |
CVE-2026-12405 |
high | 8.8 | 0.0158 | 2026-11-02 | A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability ex | |
CVE-2026-96658 |
high | 8.8 | 0.0072 | 2026-11-02 | A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker wi |