| CVE-2026-122041 | CRITICAL | 9.1 | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of… | 2026-11-07 |
| CVE-2026-122659 | MEDIUM | 5.4 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Inco… | 2026-11-07 |
| CVE-2026-122660 | MEDIUM | 4.3 | Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Explo… | 2026-11-07 |
| CVE-2026-122663 | MEDIUM | 5.3 | Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Confi… | 2026-11-07 |
| CVE-2026-122669 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest … | 2026-11-07 |
| CVE-2026-123183 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PluginUs.Net Ac… | 2026-11-07 |
| CVE-2026-123462 | MEDIUM | 5.3 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co… | 2026-11-07 |
| CVE-2026-123467 | MEDIUM | 4.3 | Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows … | 2026-11-07 |
| CVE-2026-123474 | MEDIUM | 5.3 | Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks… | 2026-11-07 |
| CVE-2026-123477 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblo… | 2026-11-07 |
| CVE-2026-123483 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetF… | 2026-11-07 |
| CVE-2026-123860 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetF… | 2026-11-07 |
| CVE-2026-123861 | MEDIUM | 5.3 | Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Sel… | 2026-11-07 |
| CVE-2026-123963 | HIGH | 7.3 | A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1… | 2026-11-07 |
| CVE-2026-123964 | MEDIUM | 4.3 | A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. Thi… | 2026-11-07 |
| CVE-2026-120984 | CRITICAL | 9.1 | A flaw was found in the Keycloak server's client management component. When a client is created or imported wi… | 2026-11-07 |
| CVE-2026-123966 | CRITICAL | 10.0 | A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentCon… | 2026-11-07 |
| CVE-2026-123988 | MEDIUM | 5.3 | A vulnerability has been found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39… | 2026-11-07 |
| CVE-2026-99271 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ALSA: line6: Clear prev_fbuf on capture b… | 2026-11-07 |
| CVE-2026-99272 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
smb: client: validate the data area in SM… | 2026-11-07 |
| CVE-2026-99273 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reserve space for the UTF-16 termi… | 2026-11-07 |
| CVE-2026-99274 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix fiemap wild read on empt… | 2026-11-07 |
| CVE-2026-99275 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
smb: client: reject short SESSION_SETUP r… | 2026-11-07 |
| CVE-2026-99276 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: defer connection scavenging while … | 2026-11-07 |
| CVE-2026-99277 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: hold a connection reference for ea… | 2026-11-07 |
| CVE-2026-99278 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: limit sessions on each connection
… | 2026-11-07 |
| CVE-2026-99279 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reclaim ended sessions on logoff a… | 2026-11-07 |
| CVE-2026-99280 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: drain session procfs readers befor… | 2026-11-07 |
| CVE-2026-99281 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
tun: Require CAP_NET_ADMIN to attach to a… | 2026-11-07 |
| CVE-2026-99282 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_teql: fix use-after-free o… | 2026-11-07 |
| CVE-2026-123989 | MEDIUM | 6.3 | A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus o… | 2026-11-07 |
| CVE-2026-124307 | MEDIUM | 5.8 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability that allows attackers to corrup… | 2026-11-07 |
| CVE-2026-124308 | MEDIUM | 5.8 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRef… | 2026-11-07 |
| CVE-2026-124309 | MEDIUM | 6.1 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap out-of-bounds read vulnerability in SEIReader::xParseSEIScal… | 2026-11-07 |
| CVE-2026-124310 | MEDIUM | 6.1 | Fraunhofer HHI VVdeC before 3.2.1 contains an out-of-bounds read vulnerability that allows attackers to crash … | 2026-11-07 |
| CVE-2026-124311 | MEDIUM | 5.5 | Fraunhofer HHI VVdeC through 3.2.1 contains a NULL pointer dereference vulnerability in InterPrediction::xPred… | 2026-11-07 |
| CVE-2026-124312 | MEDIUM | 4.7 | Fraunhofer HHI VVdeC through 3.2.1 contains a heap out-of-bounds read vulnerability that allows attackers to c… | 2026-11-07 |
| CVE-2026-124313 | MEDIUM | 4.3 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the w… | 2026-11-07 |
| CVE-2026-124314 | MEDIUM | 6.5 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in erpne… | 2026-11-07 |
| CVE-2026-124315 | MEDIUM | 6.5 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the w… | 2026-11-07 |
| CVE-2026-124316 | MEDIUM | 4.3 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the w… | 2026-11-07 |
| CVE-2026-124317 | MEDIUM | 4.8 | libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16()… | 2026-11-07 |
| CVE-2026-124318 | HIGH | 7.2 | Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and M… | 2026-11-07 |
| CVE-2026-123990 | HIGH | 7.3 | A security vulnerability has been detected in DataEase up to 2.10.27/3.1.0. Affected is the function ExtWhere2… | 2026-11-07 |
| CVE-2026-123991 | HIGH | 7.3 | A vulnerability was detected in DataEase up to 2.10.27. Affected by this vulnerability is the function Whiteli… | 2026-11-07 |
| CVE-2026-119522 | MEDIUM | 5.3 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorr… | 2026-11-07 |
| CVE-2026-120836 | MEDIUM | 6.5 | Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows E… | 2026-11-07 |
| CVE-2026-123461 | MEDIUM | 5.3 | Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorr… | 2026-11-07 |
| CVE-2026-123472 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp… | 2026-11-07 |
| CVE-2026-123992 | MEDIUM | 4.3 | A flaw has been found in DataEase up to 2.10.27. Affected by this issue is the function StaticResourceServer.v… | 2026-11-07 |