| CVE-2026-49125 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-49126 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-56717 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-62345 | HIGH | 7.6 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated … | 2026-11-06 |
| CVE-2026-62346 | HIGH | 7.6 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated … | 2026-11-06 |
| CVE-2026-71495 | CRITICAL | 10.0 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVA… | 2026-11-06 |
| CVE-2026-77708 | MEDIUM | 5.9 | A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ auth… | 2026-11-06 |
| CVE-2026-77709 | MEDIUM | 5.9 | A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authe… | 2026-11-06 |
| CVE-2026-82308 | HIGH | 7.5 | A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN servi… | 2026-11-06 |
| CVE-2026-84473 | NA | N/A | Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16… | 2026-11-06 |
| CVE-2026-90975 | NA | N/A | A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kern… | 2026-11-06 |
| CVE-2026-109683 | NA | N/A | A newline
injection vulnerability exists in the UPnP service of Archer BE805 v1 such that
an adjacent attacker… | 2026-11-06 |
| CVE-2026-119217 | NA | N/A | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a reservation duplic… | 2026-11-06 |
| CVE-2026-120484 | NA | N/A | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-119167 Reason: This candi… | 2026-11-06 |
| CVE-2026-123974 | HIGH | 7.8 | In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the… | 2026-11-06 |
| CVE-2026-124025 | MEDIUM | 4.3 | Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print … | 2026-11-06 |
| CVE-2026-124026 | MEDIUM | 4.3 | Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController:… | 2026-11-06 |
| CVE-2026-124027 | HIGH | 7.5 | ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage… | 2026-11-06 |
| CVE-2026-124028 | MEDIUM | 4.2 | mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers t… | 2026-11-06 |
| CVE-2026-124029 | MEDIUM | 5.7 | Kopia through 0.23.1 contains a path traversal vulnerability in copyDirectoryContent that allows users with re… | 2026-11-06 |
| CVE-2026-124030 | MEDIUM | 5.5 | GPAC through 26.07.0 contains a type confusion vulnerability in gf_sg_command_apply() in src/scenegraph/comman… | 2026-11-06 |
| CVE-2026-124031 | MEDIUM | 5.5 | GPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseSha… | 2026-11-06 |
| CVE-2026-124039 | LOW | 3.3 | Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to r… | 2026-11-06 |
| CVE-2026-124040 | HIGH | 8.1 | CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability … | 2026-11-06 |
| CVE-2026-33050 | HIGH | 8.8 | GeoNode is a geospatial content management system, a platform for the management and publication of geospatial… | 2026-11-06 |
| CVE-2026-46429 | MEDIUM | 5.5 | GeoNode is a geospatial content management system, a platform for the management and publication of geospatial… | 2026-11-06 |
| CVE-2026-55449 | NA | N/A | CloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project resolution accepts p… | 2026-11-06 |
| CVE-2026-55649 | MEDIUM | 6.3 | GeoNode is a geospatial content management system, a platform for the management and publication of geospatial… | 2026-11-06 |
| CVE-2026-58490 | CRITICAL | 9.8 | Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0… | 2026-11-06 |
| CVE-2026-63663 | MEDIUM | 6.5 | CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in i… | 2026-11-06 |
| CVE-2026-63664 | MEDIUM | 6.5 | CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export opera… | 2026-11-06 |
| CVE-2026-65960 | HIGH | 8.8 | Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can us… | 2026-11-06 |
| CVE-2026-73860 | NA | N/A | CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the s… | 2026-11-06 |
| CVE-2025-54991 | MEDIUM | 5.5 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desk… | 2026-11-06 |
| CVE-2025-55002 | MEDIUM | 5.5 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desk… | 2026-11-06 |
| CVE-2026-102344 | HIGH | 8.1 | Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback HTTP server did not… | 2026-11-06 |
| CVE-2026-102530 | NA | N/A | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server U… | 2026-11-06 |
| CVE-2026-102610 | MEDIUM | 6.4 | fast-agent is a framework for building, running, and evaluating AI agents with Model Context Protocol support.… | 2026-11-06 |
| CVE-2026-102657 | HIGH | 7.5 | esm.sh is a no-build content delivery network (CDN) for web development. Prior to server version 137_7, the do… | 2026-11-06 |
| CVE-2026-123787 | MEDIUM | 4.3 | A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown functio… | 2026-11-06 |
| CVE-2026-124078 | HIGH | 7.5 | plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption vulnerability in the… | 2026-11-06 |
| CVE-2026-54349 | CRITICAL | 9.8 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-54589 | NA | N/A | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-59171 | MEDIUM | 5.9 | JSON-java is a reference implementation of a JSON package in Java. From version 20150729 through 20260522, JSO… | 2026-11-06 |
| CVE-2026-63437 | MEDIUM | 6.5 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prio… | 2026-11-06 |
| CVE-2026-63438 | CRITICAL | 9.8 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prio… | 2026-11-06 |
| CVE-2026-63439 | CRITICAL | 9.8 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prio… | 2026-11-06 |
| CVE-2026-63440 | MEDIUM | 5.9 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prio… | 2026-11-06 |
| CVE-2026-63441 | NA | N/A | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. From… | 2026-11-06 |
| CVE-2026-71397 | NA | N/A | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthent… | 2026-11-06 |