Browse All CVEs
50,459 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107342 |
medium | 4.3 | 0.0018 | 2026-11-01 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does | |
CVE-2026-79699 |
medium | 4.4 | 0.0023 | 2026-11-01 | A flaw was found in the containers/storage library. A crafted tar archive containing a mal | |
CVE-2026-10052 |
medium | 4.1 | 0.0019 | 2026-11-01 | A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker | |
CVE-2026-85471 |
medium | 6.4 | 0.0021 | 2026-11-01 | A flaw was found in Quay. An authenticated repository administrator could bypass the hostn | |
CVE-2026-74247 |
medium | 4.2 | 0.0024 | 2026-11-01 | A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository | |
CVE-2026-74245 |
medium | 5.9 | 0.0042 | 2026-11-01 | A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with | |
CVE-2026-74243 |
medium | 6.5 | 0.0046 | 2026-11-01 | A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not | |
CVE-2026-74241 |
medium | 4.8 | 0.0031 | 2026-11-01 | A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) a | |
CVE-2026-2376 |
medium | 4.9 | 0.0019 | 2026-11-01 | A flaw was found in mirror-registry where an authenticated user can trick the system into | |
CVE-2026-16910 |
medium | 5.5 | 0.0029 | 2026-11-01 | A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic web | |
CVE-2026-11569 |
medium | 5.4 | 0.0014 | 2026-11-01 | A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, | |
CVE-2026-102576 |
medium | 4.2 | 0.0029 | 2026-11-01 | A flaw was found in Quay. A remote attacker could trick a user into logging in through a c | |
CVE-2026-102295 |
medium | 5.4 | 0.0022 | 2026-11-01 | A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback | |
CVE-2023-3384 |
medium | 5.4 | 0.0049 | 2026-11-01 | A flaw was found in the Quay registry. While the image labels created through Quay undergo | |
CVE-2023-4959 |
medium | 6.5 | 0.0030 | 2026-11-01 | A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perfor | |
CVE-2026-32591 |
medium | 5.5 | 0.0035 | 2026-11-01 | A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization | |
CVE-2026-2377 |
medium | 6.5 | 0.0041 | 2026-11-01 | A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export | |
CVE-2026-15927 |
medium | 6.8 | 0.0060 | 2026-11-01 | A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST | |
CVE-2026-95521 |
high | 7.8 | 0.0073 | 2026-11-01 | A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose sou | |
CVE-2026-120198 |
critical | 9.3 | 0.0207 | 2026-11-01 | A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function | |
CVE-2026-120196 |
critical | 9.4 | 0.0169 | 2026-11-01 | A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_ | |
CVE-2026-111802 |
medium | 6.6 | 0.0016 | 2026-11-01 | A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected | |
CVE-2026-120197 |
high | 8.6 | 0.0169 | 2026-11-01 | A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_fo | |
CVE-2023-3255 |
medium | 6.5 | 0.0189 | 2026-11-01 | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. | |
CVE-2023-39417 |
high | 8.8 | 0.0168 | 2026-11-01 | IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses | |
CVE-2026-120195 |
critical | 9.3 | 0.0207 | 2026-11-01 | A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The | |
CVE-2026-120192 |
medium | 5.5 | 0.0085 | 2026-11-01 | A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an | |
CVE-2026-120191 |
medium | 5.5 | 0.0080 | 2026-11-01 | A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is s | |
CVE-2026-86404 |
high | 8.8 | 0.0070 | 2026-11-01 | EAP's Artemis deserialization configuration permits deserialization by default. ObjectMess | |
CVE-2026-15565 |
high | 7.5 | 0.0102 | 2026-11-01 | A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endp | |
CVE-2026-15563 |
high | 7.4 | 0.0066 | 2026-11-01 | A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations wi | |
CVE-2026-15562 |
high | 7.5 | 0.0089 | 2026-11-01 | A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach | |
CVE-2026-15560 |
high | 8.1 | 0.0075 | 2026-11-01 | when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR code | |
CVE-2026-15554 |
high | 7.4 | 0.0048 | 2026-11-01 | the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requir | |
CVE-2025-4948 |
high | 7.5 | 0.0112 | 2026-11-01 | A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP lib | |
CVE-2025-32914 |
high | 7.4 | 0.0079 | 2026-11-01 | A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulne | |
CVE-2025-32913 |
high | 7.5 | 0.0086 | 2026-11-01 | A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() func | |
CVE-2025-32911 |
critical | 9.0 | 0.0098 | 2026-11-01 | A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_ | |
CVE-2025-32906 |
high | 7.5 | 0.0129 | 2026-11-01 | A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulner | |
CVE-2025-32049 |
high | 7.5 | 0.0107 | 2026-11-01 | A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket mess | |
CVE-2025-2784 |
medium | 6.5 | 0.0088 | 2026-11-01 | A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sni | |
CVE-2026-120190 |
low | 2.0 | 0.0039 | 2026-11-01 | A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulne | |
CVE-2026-120189 |
critical | 9.3 | 0.0135 | 2026-11-01 | A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_up | |
CVE-2026-120252 |
medium | 6.8 | 0.0014 | 2026-11-01 | imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerabil | |
CVE-2026-120251 |
medium | 6.8 | 0.0012 | 2026-11-01 | imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_f | |
CVE-2026-120250 |
medium | 6.0 | 0.0011 | 2026-11-01 | OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability | |
CVE-2026-120249 |
medium | 6.9 | 0.0014 | 2026-11-01 | Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forger | |
CVE-2026-120248 |
medium | 4.6 | 0.0024 | 2026-11-01 | Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authe | |
CVE-2026-120247 |
medium | 6.8 | 0.0012 | 2026-11-01 | FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huf | |
CVE-2026-120246 |
medium | 6.8 | 0.0012 | 2026-11-01 | FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDX |