| CVE-2026-120868 | NA | N/A | Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in N… | 2026-11-13 |
| CVE-2026-126355 | MEDIUM | 5.3 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf()… | 2026-11-13 |
| CVE-2026-126356 | MEDIUM | 5.3 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.5.1 until 4.13.16… | 2026-11-13 |
| CVE-2026-126357 | MEDIUM | 5.3 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, mount(… | 2026-11-13 |
| CVE-2026-126358 | MEDIUM | 5.3 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.1.4 until 4.13.16… | 2026-11-13 |
| CVE-2026-126359 | LOW | 3.4 | Hono is a Web application framework that provides support for any JavaScript runtime. From 3.12.0 until 4.13.1… | 2026-11-13 |
| CVE-2026-126360 | MEDIUM | 5.3 | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.2, TraceContextTextMapPr… | 2026-11-13 |
| CVE-2026-126361 | NA | N/A | Astro is a web framework for content-driven websites. Prior to 7.4.5, Astro rendered a string used as a dynami… | 2026-11-13 |
| CVE-2026-126362 | NA | N/A | Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer ins… | 2026-11-13 |
| CVE-2026-126363 | NA | N/A | Astro is a web framework for content-driven websites. From 0.2.0 until 7.1.2, the @astrojs/solid-js renderer i… | 2026-11-13 |
| CVE-2026-126364 | NA | N/A | Astro is a web framework for content-driven websites. From 5.14.3 until 7.4.7, Astro's /_image endpoint compar… | 2026-11-13 |
| CVE-2026-126365 | MEDIUM | 5.4 | Astro is a web framework for content-driven websites. Prior to @astrojs/prism 4.1.2, and from @astrojs/markdoc… | 2026-11-13 |
| CVE-2026-126366 | HIGH | 7.5 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.7, the … | 2026-11-13 |
| CVE-2026-126367 | MEDIUM | 4.8 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Before 1.13… | 2026-11-13 |
| CVE-2026-126792 | MEDIUM | 4.7 | A memory-safety flaw in the key-management request-building component of the library can lead to an out-of-bou… | 2026-11-13 |
| CVE-2026-126839 | MEDIUM | 4.2 | A deserialization type-restriction control in the BSON serialization component can be bypassed because the che… | 2026-11-13 |
| CVE-2026-126982 | HIGH | 7.5 | A type allow-list bypass in the BSON serialization library of the MongoDB C# Driver allows a type-restriction … | 2026-11-13 |
| CVE-2026-127212 | MEDIUM | 4.3 | Dokploy before 0.31.1 contains a missing ownership check vulnerability in the readAppMonitoring tRPC procedure… | 2026-11-13 |
| CVE-2026-127273 | MEDIUM | 4.3 | A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function GetWANStatus/GetWANSt… | 2026-11-13 |
| CVE-2026-127274 | LOW | 3.7 | A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file … | 2026-11-13 |
| CVE-2026-127275 | CRITICAL | 10.0 | A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSettin… | 2026-11-13 |
| CVE-2026-128065 | NA | N/A | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. From 1.14.0… | 2026-11-13 |
| CVE-2026-128066 | NA | N/A | Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectory_v2.load() in src/PIL/TiffImage… | 2026-11-13 |
| CVE-2026-128067 | NA | N/A | Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF i… | 2026-11-13 |
| CVE-2026-92735 | MEDIUM | 5.9 | HashiCorp Vault and Vault Enterprise are vulnerable to an issue in the integrated storage join process that ma… | 2026-11-13 |
| CVE-2026-93333 | LOW | 2.7 | Vault's audit devices did not validate the contents of a configured audit log prefix and did not consistently … | 2026-11-13 |
| CVE-2026-93335 | MEDIUM | 6.5 | Vault Community Edition and Vault Enterprise did not consistently apply explicit ACL policy deny rules to requ… | 2026-11-13 |
| CVE-2026-107407 | NA | N/A | Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetSca… | 2026-11-13 |
| CVE-2026-107408 | NA | N/A | Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of S… | 2026-11-13 |
| CVE-2026-107409 | NA | N/A | Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Servi… | 2026-11-13 |
| CVE-2026-107410 | NA | N/A | Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetS… | 2026-11-13 |
| CVE-2026-127276 | LOW | 3.7 | A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of the componen… | 2026-11-13 |
| CVE-2026-127277 | CRITICAL | 10.0 | A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown functio… | 2026-11-13 |
| CVE-2026-127278 | HIGH | 7.3 | A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function sen… | 2026-11-13 |
| CVE-2026-127279 | HIGH | 7.3 | A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the fi… | 2026-11-13 |
| CVE-2026-127281 | HIGH | 7.3 | A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function of the file mi… | 2026-11-13 |
| CVE-2026-127282 | MEDIUM | 4.3 | A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by… | 2026-11-13 |
| CVE-2026-127283 | HIGH | 7.3 | A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unkn… | 2026-11-13 |
| CVE-2026-127284 | HIGH | 7.3 | A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part o… | 2026-11-13 |
| CVE-2026-127915 | LOW | 2.0 | The MCUboot TLV iterator bootutil_tlv_iter_next() in boot/bootutil/src/tlv.c walks image trailer TLVs with a s… | 2026-11-13 |
| CVE-2026-127916 | LOW | 2.9 | bootutil_img_hash() computes the image digest over ih_hdr_size + ih_img_size + ih_protect_tlv_size bytes, all … | 2026-11-13 |
| CVE-2026-127928 | LOW | 2.0 | In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_… | 2026-11-13 |
| CVE-2026-128091 | LOW | 2.0 | When MCUboot is built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT), bootutil_aes_ctr_drop() in bo… | 2026-11-13 |
| CVE-2026-128321 | NA | N/A | Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an attacker… | 2026-11-13 |
| CVE-2026-15465 | NA | N/A | Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kern… | 2026-11-13 |
| CVE-2026-16659 | MEDIUM | 4.0 | MCUboot's serial-recovery image-upload handler bs_upload() in boot/boot_serial/src/boot_serial.c declares cons… | 2026-11-13 |
| CVE-2026-16662 | LOW | 2.4 | boot_save_boot_status() in boot/bootutil/src/boot_record.c reads the image's EXPECTED_HASH_TLV into a stack bu… | 2026-11-13 |
| CVE-2026-16664 | MEDIUM | 5.1 | MCUboot's Zephyr serial-recovery upload handler bs_upload() in boot/boot_serial/src/boot_serial.c decodes the … | 2026-11-13 |
| CVE-2026-16671 | LOW | 2.9 | split_image_check() in boot/bootutil/src/loader.c declares a fixed uint8_t loader_hash[32] buffer and passes i… | 2026-11-13 |
| CVE-2026-126759 | MEDIUM | 5.3 | A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown proce… | 2026-11-12 |