Browse All CVEs
50,460 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-111560 |
high | 8.6 | 0.0908 | 2026-11-02 | KEV | Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Contr |
CVE-2026-94349 |
high | 8.0 | 0.0216 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2026-91908 |
medium | 6.8 | 0.0014 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of | |
CVE-2026-91907 |
medium | 6.1 | 0.0015 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2024-12141 |
medium | 4.3 | 0.0020 | 2026-11-02 | The product fails to sufficiently validate callback URLs, allowing them to be manipulated | |
CVE-2026-91906 |
medium | 5.5 | 0.0013 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assi | |
CVE-2026-91905 |
medium | 6.7 | 0.0008 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of | |
CVE-2026-91904 |
medium | 5.5 | 0.0009 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assi | |
CVE-2026-92886 |
high | 7.8 | 0.0013 | 2026-11-02 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Insti | |
CVE-2026-91903 |
medium | 6.1 | 0.0020 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a | |
CVE-2026-101435 |
medium | 6.6 | 0.0015 | 2026-11-02 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-91911 |
medium | 6.1 | 0.0025 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a | |
CVE-2026-91910 |
medium | 5.7 | 0.0021 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a | |
CVE-2026-91909 |
medium | 4.6 | 0.0068 | 2026-11-02 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization o | |
CVE-2024-9517 |
medium | 4.9 | 0.0018 | 2026-11-02 | The refresh token grant type in WSO2 products fails to re-validate account status before i | |
CVE-2026-79992 |
high | 7.8 | 0.0023 | 2026-11-02 | A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by proc | |
CVE-2026-100140 |
low | 1.9 | 0.0017 | 2026-11-02 | An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) fun | |
CVE-2026-120216 |
medium | 5.9 | 0.0033 | 2026-11-02 | fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server | |
CVE-2024-2372 |
medium | 5.4 | 0.0020 | 2026-11-02 | The affected components accept user-supplied input for constructing redirection URLs witho | |
CVE-2026-8923 |
high | 8.7 | 0.0218 | 2026-11-02 | Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are | |
CVE-2026-117531 |
medium | 5.9 | 0.0033 | 2026-11-02 | @fastify/multipart is the multipart form-data and file upload plugin for the Fastify web f | |
CVE-2026-117518 |
high | 8.2 | 0.0046 | 2026-11-02 | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. | |
CVE-2026-72693 |
high | 7.8 | 0.0015 | 2026-11-02 | `openvt -u` is intended to identify the owner of the current VT and then execute `login` a | |
CVE-2026-2613 |
high | 8.7 | 0.0042 | 2026-11-02 | The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing | |
CVE-2026-120214 |
medium | 5.9 | 0.0047 | 2026-11-02 | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server u | |
CVE-2026-120213 |
critical | 9.1 | 0.0069 | 2026-11-02 | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server u | |
CVE-2026-120215 |
low | 3.7 | 0.0029 | 2026-11-02 | @fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through | |
CVE-2026-117549 |
medium | 4.2 | 0.0008 | 2026-11-02 | @fastify/secure-session is a session plugin for Fastify that stores an encrypted session i | |
CVE-2025-12544 |
medium | 4.8 | 0.0020 | 2026-11-02 | The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing us | |
CVE-2026-18800 |
medium | 4.4 | 0.0016 | 2026-11-02 | When an Event Publisher output adapter is configured with properties that are irrelevant t | |
CVE-2026-97185 |
high | 7.8 | 0.0013 | 2026-11-02 | A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, | |
CVE-2026-92248 |
high | 7.8 | 0.0019 | 2026-11-02 | A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a | |
CVE-2026-90947 |
high | 7.8 | 0.0013 | 2026-11-02 | A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Li | |
CVE-2026-90948 |
high | 7.8 | 0.0023 | 2026-11-02 | A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embe | |
CVE-2026-59090 |
high | 8.4 | 0.0076 | 2026-11-02 | A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer | |
CVE-2026-42169 |
high | 7.8 | 0.0013 | 2026-11-02 | A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP | |
CVE-2026-66758 |
high | 7.8 | 0.0030 | 2026-11-02 | A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the p | |
CVE-2026-58384 |
high | 7.3 | 0.0031 | 2026-11-02 | A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause | |
CVE-2026-58380 |
high | 7.8 | 0.0032 | 2026-11-02 | A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM fi | |
CVE-2026-58379 |
high | 7.3 | 0.0047 | 2026-11-02 | A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overf | |
CVE-2026-118871 |
medium | 6.5 | 0.0031 | 2026-11-02 | SQL injection vulnerability classified as an internal threat level.Attackers can steal dat | |
CVE-2024-7075 |
medium | 4.6 | 0.0020 | 2026-11-02 | The user search function within the management console fails to properly encode user-suppl | |
CVE-2025-13647 |
medium | 5.8 | 0.0018 | 2026-11-02 | The affected component fails to enforce expected validation constraints on the `content-ty | |
CVE-2026-102555 |
high | 8.2 | 0.0048 | 2026-11-02 | A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated b | |
CVE-2026-86469 |
medium | 5.3 | 0.0014 | 2026-11-02 | A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTIN | |
CVE-2024-7358 |
high | 7.1 | 0.0029 | 2026-11-02 | A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. | |
CVE-2026-107457 |
low | 2.3 | 0.0026 | 2026-11-02 | A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under ce | |
CVE-2026-18199 |
high | 8.8 | 0.0245 | 2026-11-02 | Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions befor | |
CVE-2026-103310 |
medium | 5.3 | 0.0011 | 2026-11-02 | The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the | |
CVE-2026-101184 |
medium | 5.5 | 0.0008 | 2026-11-02 | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation |