| CVE-2026-75578 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a command injection vulnerability in luci/model/cbi/vpn/openvpn/client.lua,… | 2026-11-13 |
| CVE-2026-109903 | HIGH | 7.8 | A buffer overread caused by casting a negative integer to CARD32 in XvQueryImageAttributes in X.Org X Server b… | 2026-11-13 |
| CVE-2026-109904 | NA | N/A | A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.… | 2026-11-13 |
| CVE-2026-112182 | NA | N/A | Unauthorization vulnerability in the management of workflow definitions in OpenKM Community Edition. The REST … | 2026-11-13 |
| CVE-2026-123274 | NA | N/A | Out-of-bounds Write vulnerability in Apache DataSketches C++. An
application that deserializes a KLL sketch … | 2026-11-13 |
| CVE-2026-123338 | NA | N/A | Out-of-bounds Write vulnerability in Apache DataSketches C++. An
application that deserializes a REQ sketch … | 2026-11-13 |
| CVE-2026-125659 | NA | N/A | This vulnerability exists in the eMudhra emBridge due to missing authorization checks in the FileBrowser API e… | 2026-11-13 |
| CVE-2026-120221 | NA | N/A | In FRRouting 8.4 and later, bgpd frees the same memory twice when dynamic BGP neighbors disconnect, if the pee… | 2026-11-13 |
| CVE-2025-41725 | MEDIUM | 6.5 | Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving spec… | 2026-11-13 |
| CVE-2026-105880 | MEDIUM | 5.3 | Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allo… | 2026-11-13 |
| CVE-2026-107525 | MEDIUM | 5.3 | Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit th… | 2026-11-13 |
| CVE-2026-107526 | MEDIUM | 4.6 | Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker … | 2026-11-13 |
| CVE-2026-112830 | MEDIUM | 5.3 | Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Contr… | 2026-11-13 |
| CVE-2026-119518 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal … | 2026-11-13 |
| CVE-2026-121721 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishP… | 2026-11-13 |
| CVE-2026-121771 | MEDIUM | 5.3 | Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gute… | 2026-11-13 |
| CVE-2026-125801 | MEDIUM | 6.5 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in A… | 2026-11-13 |
| CVE-2026-125814 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co P… | 2026-11-13 |
| CVE-2026-125815 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’… | 2026-11-13 |
| CVE-2026-125816 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT North… | 2026-11-13 |
| CVE-2026-125833 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YIT… | 2026-11-13 |
| CVE-2026-128834 | MEDIUM | 5.3 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploitin… | 2026-11-13 |
| CVE-2026-86355 | HIGH | 8.3 | Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attack… | 2026-11-13 |
| CVE-2026-86356 | HIGH | 8.8 | Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to ad… | 2026-11-13 |
| CVE-2026-95518 | HIGH | 7.0 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştı… | 2026-11-13 |
| CVE-2026-109095 | NA | N/A | A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.… | 2026-11-13 |
| CVE-2026-109096 | MEDIUM | 5.5 | Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X… | 2026-11-13 |
| CVE-2026-116411 | HIGH | 8.8 | Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limite… | 2026-11-13 |
| CVE-2026-116412 | MEDIUM | 5.5 | Dell PowerStore contains an insecure-file-permissions vulnerability. A local low-privileged attacker could exp… | 2026-11-13 |
| CVE-2026-116413 | HIGH | 7.1 | Dell PowerStore contains a use-of-broken-cryptography vulnerability. A low-privileged attacker could exploit i… | 2026-11-13 |
| CVE-2026-124758 | NA | N/A | P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index aga… | 2026-11-13 |
| CVE-2026-124759 | NA | N/A | P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination… | 2026-11-13 |
| CVE-2026-124760 | NA | N/A | P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received ala… | 2026-11-13 |
| CVE-2026-124761 | NA | N/A | P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration,… | 2026-11-13 |
| CVE-2026-124762 | NA | N/A | P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or c… | 2026-11-13 |
| CVE-2026-125800 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto… | 2026-11-13 |
| CVE-2026-127122 | NA | N/A | P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of … | 2026-11-13 |
| CVE-2026-127123 | NA | N/A | P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when … | 2026-11-13 |
| CVE-2026-127124 | NA | N/A | P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activit… | 2026-11-13 |
| CVE-2026-127125 | NA | N/A | P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has bee… | 2026-11-13 |
| CVE-2026-128790 | NA | N/A | In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Re… | 2026-11-13 |
| CVE-2026-77706 | MEDIUM | 6.5 | Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri… | 2026-11-13 |
| CVE-2026-82177 | HIGH | 7.2 | Dell PowerStore contains an OS Command Injection vulnerability. A high-privileged attacker could exploit this … | 2026-11-13 |
| CVE-2026-82179 | MEDIUM | 4.9 | Dell PowerStore contains an authorization bypass vulnerability. An authenticated administrator could exploit t… | 2026-11-13 |
| CVE-2026-86353 | MEDIUM | 5.0 | Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker wi… | 2026-11-13 |
| CVE-2026-91094 | NA | N/A | A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarba… | 2026-11-13 |
| CVE-2026-92241 | MEDIUM | 5.7 | The AVRCP browsing channel's L2CAP receive-buffer callback, browsing_avrcp_l2cap_alloc_buf() in subsys/bluetoo… | 2026-11-13 |
| CVE-2026-103769 | HIGH | 7.2 | Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce pdf-… | 2026-11-13 |
| CVE-2026-107522 | HIGH | 7.2 | Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vul… | 2026-11-13 |
| CVE-2026-107523 | HIGH | 8.7 | Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass vo… | 2026-11-13 |