| CVE-2026-62855 | MEDIUM | 4.4 | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrator-only App Logs vie… | 2026-11-06 |
| CVE-2026-62856 | HIGH | 7.7 | FreeScout is a self-hosted help desk and shared mailbox application. Prior to version 1.8.226, the polycast/r… | 2026-11-06 |
| CVE-2026-85743 | HIGH | 8.2 | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, multiple outbound paths in Helper::… | 2026-11-06 |
| CVE-2026-85744 | MEDIUM | 5.4 | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.227, the conversation_merge action recor… | 2026-11-06 |
| CVE-2026-102356 | MEDIUM | 5.0 | Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's m… | 2026-11-06 |
| CVE-2026-102359 | HIGH | 7.5 | Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used… | 2026-11-06 |
| CVE-2026-102650 | HIGH | 7.5 | Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 u… | 2026-11-06 |
| CVE-2026-118670 | HIGH | 8.8 | OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages. From 3.5.0-beta.0 until 3.12.15,… | 2026-11-06 |
| CVE-2026-119758 | MEDIUM | 6.5 | ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerabi… | 2026-11-06 |
| CVE-2026-123748 | MEDIUM | 4.3 | A security flaw has been discovered in chenyme grok2api up to 3.1.6. Affected by this vulnerability is the fun… | 2026-11-06 |
| CVE-2026-123824 | NA | N/A | The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a … | 2026-11-06 |
| CVE-2026-123876 | MEDIUM | 4.4 | A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK … | 2026-11-06 |
| CVE-2026-123973 | MEDIUM | 5.0 | SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the nec… | 2026-11-06 |
| CVE-2026-123976 | MEDIUM | 5.5 | EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers… | 2026-11-06 |
| CVE-2026-62344 | HIGH | 7.5 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticat… | 2026-11-06 |
| CVE-2026-75598 | MEDIUM | 6.3 | The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation. Pri… | 2026-11-06 |
| CVE-2026-85742 | HIGH | 7.5 | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, a pre-authenticated attacker can pl… | 2026-11-06 |
| CVE-2026-89017 | HIGH | 7.5 | Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attacke… | 2026-11-06 |
| CVE-2024-36240 | NA | N/A | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-… | 2026-11-06 |
| CVE-2025-46896 | NA | N/A | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-… | 2026-11-06 |
| CVE-2025-64798 | NA | N/A | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-… | 2026-11-06 |
| CVE-2026-100080 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
xen-netback: Fix UAF when reading statist… | 2026-11-06 |
| CVE-2026-100081 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
xen-netback: defer xenvif_mcast_addr_list… | 2026-11-06 |
| CVE-2026-100082 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
xen-blkback: Avoid UAF when reading I/O s… | 2026-11-06 |
| CVE-2026-107154 | HIGH | 8.8 | A session validation vulnerability has been identified in the SonicOS management interface, which in specific … | 2026-11-06 |
| CVE-2026-107155 | HIGH | 8.8 | A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which … | 2026-11-06 |
| CVE-2026-108262 | MEDIUM | 6.5 | DDEV is an open-source tool for running local web development environments for PHP and Node.js. From 1.25.2 un… | 2026-11-06 |
| CVE-2026-10146 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-10147 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-119923 | CRITICAL | 9.8 | A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0… | 2026-11-06 |
| CVE-2026-119924 | HIGH | 8.1 | An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions … | 2026-11-06 |
| CVE-2026-122113 | NA | N/A | A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a malici… | 2026-11-06 |
| CVE-2026-123356 | HIGH | 7.5 | GROBID is machine learning software for extracting information from scholarly documents. Prior to 0.9.1, the u… | 2026-11-06 |
| CVE-2026-123357 | LOW | N/A | GROBID is machine learning software for extracting information from scholarly documents. Prior to 0.9.1, the L… | 2026-11-06 |
| CVE-2026-123993 | HIGH | 8.8 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA… | 2026-11-06 |
| CVE-2026-123994 | MEDIUM | 6.3 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability in the DIA… | 2026-11-06 |
| CVE-2026-123995 | MEDIUM | 4.6 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA… | 2026-11-06 |
| CVE-2026-123996 | MEDIUM | 4.6 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP… | 2026-11-06 |
| CVE-2026-123997 | MEDIUM | 6.5 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability… | 2026-11-06 |
| CVE-2026-123998 | HIGH | 8.3 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its remo… | 2026-11-06 |
| CVE-2026-19703 | MEDIUM | 5.1 | A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific con… | 2026-11-06 |
| CVE-2026-19868 | NA | N/A | An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials … | 2026-11-06 |
| CVE-2026-47400 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-47401 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-47402 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-47403 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-47404 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-49122 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-49123 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-49124 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |