| CVE-2026-128043 | LOW | 3.1 | OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery… | 2026-11-13 |
| CVE-2026-128044 | HIGH | 7.7 | OpenMage magento-lts before 20.18.2 and 21.x before 21.0.0-beta3 validates OAuth 1.0a oauth_callback URLs with… | 2026-11-13 |
| CVE-2026-128045 | MEDIUM | 5.3 | OpenMage Magento-LTS before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an authorization bypass in t… | 2026-11-13 |
| CVE-2026-128046 | HIGH | 8.1 | OpenMage magento-lts 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an unrestricted file… | 2026-11-13 |
| CVE-2026-128047 | HIGH | 8.1 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-c… | 2026-11-13 |
| CVE-2026-128048 | MEDIUM | 4.9 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 lets restricted administrators read d… | 2026-11-13 |
| CVE-2026-128049 | CRITICAL | 9.0 | OpenMage Magento LTS before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery… | 2026-11-13 |
| CVE-2026-128051 | LOW | 3.5 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scriptin… | 2026-11-13 |
| CVE-2026-128052 | LOW | 2.7 | OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization v… | 2026-11-13 |
| CVE-2026-128053 | MEDIUM | 4.7 | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a reflected cross-site scrip… | 2026-11-13 |
| CVE-2026-128237 | MEDIUM | 5.3 | Scapy before 2.8.0 contains a denial of service vulnerability in BER_num_dec() and BERcodec_OID.do_dec() that … | 2026-11-13 |
| CVE-2026-128238 | MEDIUM | 5.3 | Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber… | 2026-11-13 |
| CVE-2026-128239 | MEDIUM | 5.5 | GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint h… | 2026-11-13 |
| CVE-2026-128240 | MEDIUM | 5.5 | GPAC through 26.07.0 contains a use-after-free vulnerability in gf_sg_proto_del() in src/scenegraph/vrml_proto… | 2026-11-13 |
| CVE-2026-128241 | MEDIUM | 4.4 | The xmlwf tool in libexpat through 2.10.0 contains a symlink following vulnerability because -d output mode op… | 2026-11-13 |
| CVE-2026-128242 | HIGH | 7.5 | actix-http before 3.20.1 and actix-web before 4.18.2 contain an unbounded decompression vulnerability in encod… | 2026-11-13 |
| CVE-2026-128328 | MEDIUM | 5.0 | Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization me… | 2026-11-13 |
| CVE-2026-128329 | HIGH | 7.7 | Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization me… | 2026-11-13 |
| CVE-2026-128330 | MEDIUM | 4.2 | Miniflux before 2.3.5 contains an insufficient session expiration vulnerability that allows attackers to retai… | 2026-11-13 |
| CVE-2026-128331 | MEDIUM | 5.3 | Miniflux before 2.3.5 contains an unverified password change vulnerability that allows holders of a signed-in … | 2026-11-13 |
| CVE-2026-128332 | HIGH | 7.4 | Listmonk 6.0.0 before 7.0.0-beta.2 contains a 2FA bypass vulnerability that allows attackers with a valid pass… | 2026-11-13 |
| CVE-2026-128333 | HIGH | 7.4 | listmonk 6.0.0 before 7.0.0-beta.2 contains an authentication bypass vulnerability in doResetPassword that ski… | 2026-11-13 |
| CVE-2026-128334 | MEDIUM | 4.8 | listmonk 6.2.0 before 7.0.0-beta.2 contains a missing authentication vulnerability that allows unauthenticated… | 2026-11-13 |
| CVE-2026-128335 | LOW | 3.7 | Contao 4.6.0 before 5.3.54, 5.4.0-RC1 before 5.7.17, and 6.0.0-RC1 before 6.0.6 fails to invalidate existing u… | 2026-11-13 |
| CVE-2026-128336 | MEDIUM | 4.8 | ExcelJS through 4.4.0 contains a prototype pollution vulnerability that allows attackers to add numeric keys t… | 2026-11-13 |
| CVE-2026-128337 | HIGH | 7.0 | ExcelJS through 4.4.0 contains a prototype pollution vulnerability in mergeConditionalFormattings that allows … | 2026-11-13 |
| CVE-2026-128338 | HIGH | 7.5 | exceljs through 4.4.0 contains a memory exhaustion vulnerability that allows attackers to crash applications b… | 2026-11-13 |
| CVE-2026-128339 | HIGH | 7.5 | ExcelJS through 4.4.0 contains a memory exhaustion vulnerability in Worksheet._parseMergeCells that allows att… | 2026-11-13 |
| CVE-2026-128340 | HIGH | 7.5 | ExcelJS through 4.4.0 contains a memory exhaustion vulnerability that allows attackers to crash applications b… | 2026-11-13 |
| CVE-2026-128341 | HIGH | 7.5 | ExcelJS through 4.4.0 contains a resource exhaustion vulnerability in data-validations-xform.js that allows at… | 2026-11-13 |
| CVE-2026-128342 | HIGH | 7.5 | ExcelJS through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop… | 2026-11-13 |
| CVE-2026-128343 | HIGH | 7.5 | exceljs through 4.4.0 contains a denial of service vulnerability that allows attackers to block the event loop… | 2026-11-13 |
| CVE-2026-128344 | HIGH | 7.5 | ExcelJS through 4.4.0 contains a memory exhaustion vulnerability that allows attackers to crash applications b… | 2026-11-13 |
| CVE-2026-128345 | MEDIUM | 5.3 | ExcelJS through 4.4.0 contains a regular expression denial of service vulnerability in slideFormula in lib/uti… | 2026-11-13 |
| CVE-2026-128346 | HIGH | 7.5 | ExcelJS through 4.4.0 contains a resource leak vulnerability in the streaming WorkbookReader.parse that leaves… | 2026-11-13 |
| CVE-2026-128347 | HIGH | 7.5 | ExcelJS through 4.4.0 contains an arbitrary file read vulnerability in the streaming WorkbookWriter that allow… | 2026-11-13 |
| CVE-2026-128348 | MEDIUM | 4.2 | ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/t… | 2026-11-13 |
| CVE-2026-61417 | MEDIUM | 6.5 | Dell SmartFabric OS10 Software, versions prior to 10.6.0.10, contains an Improper Access Control vulnerability… | 2026-11-13 |
| CVE-2026-61418 | HIGH | 7.5 | Dell SmartFabric OS10 Software, versions prior to 10.6.0.10, contains an Incorrect Authorization vulnerability… | 2026-11-13 |
| CVE-2026-75487 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators … | 2026-11-13 |
| CVE-2026-75488 | MEDIUM | 5.9 | Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in the CWMP client that allows a mali… | 2026-11-13 |
| CVE-2026-75489 | MEDIUM | 6.8 | Cudy TR3000 before 2.5.42 contains an insufficient verification of data authenticity vulnerability in the mt_w… | 2026-11-13 |
| CVE-2026-75490 | HIGH | 7.5 | Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows unauthenticated adjacent … | 2026-11-13 |
| CVE-2026-75491 | HIGH | 8.1 | Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin auth_plugin_… | 2026-11-13 |
| CVE-2026-75492 | HIGH | 7.5 | Cudy TR3000 before 2.5.42 contains an unauthenticated stack buffer overflow vulnerability in the stun_client T… | 2026-11-13 |
| CVE-2026-75493 | MEDIUM | 5.9 | Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in an obuspa getter for the TR-098 WL… | 2026-11-13 |
| CVE-2026-75494 | HIGH | 7.4 | Cudy TR3000 before 2.5.42 contains an argument injection vulnerability that allows a malicious or compromised … | 2026-11-13 |
| CVE-2026-75495 | HIGH | 8.1 | Cudy TR3000 before 2.5.42 contains an OS command injection vulnerability that allows a malicious or compromise… | 2026-11-13 |
| CVE-2026-75576 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators … | 2026-11-13 |
| CVE-2026-75577 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators … | 2026-11-13 |