| CVE-2026-71863 | LOW | 2.6 | SecureDrop is an open-source whistleblower submission system that media organizations can use to securely acce… | 2026-11-06 |
| CVE-2026-85295 | CRITICAL | 9.8 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-85708 | HIGH | 7.5 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-85712 | HIGH | 8.8 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-85726 | HIGH | 7.5 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-85736 | HIGH | 8.1 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-85737 | MEDIUM | 6.5 | Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) que… | 2026-11-06 |
| CVE-2026-86005 | NA | N/A | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-86044 | CRITICAL | 9.6 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desk… | 2026-11-06 |
| CVE-2026-103022 | MEDIUM | 5.3 | Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request() in urwid/display/… | 2026-11-06 |
| CVE-2026-104254 | MEDIUM | 5.3 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algori… | 2026-11-06 |
| CVE-2026-104267 | NA | N/A | Botan is a C++ cryptography library. From 2.7.0 until 3.13.0, Botan's Scrypt implementation on 32-bit platform… | 2026-11-06 |
| CVE-2026-119800 | MEDIUM | 4.3 | Ryot is a self-hosted personal tracking application. Prior to 10.5.6, the collectionContents GraphQL query imp… | 2026-11-06 |
| CVE-2026-123788 | MEDIUM | 4.3 | A security vulnerability has been detected in chenyme grok2api up to 3.1.6. The impacted element is an unknown… | 2026-11-06 |
| CVE-2026-123791 | HIGH | 7.3 | A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. Thi… | 2026-11-06 |
| CVE-2026-44519 | MEDIUM | 5.1 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algori… | 2026-11-06 |
| CVE-2026-47738 | MEDIUM | 5.3 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algori… | 2026-11-06 |
| CVE-2026-48057 | NA | N/A | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's X.509 Distinguished Name decoder flattens the At… | 2026-11-06 |
| CVE-2026-50240 | HIGH | 8.8 | A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository… | 2026-11-06 |
| CVE-2026-59104 | CRITICAL | 9.8 | UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) expo… | 2026-11-06 |
| CVE-2026-68933 | HIGH | 7.5 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-68935 | CRITICAL | 9.1 | Chartbrew is an open-source web application for creating charts from databases and APIs. In versions 4.8.5 thr… | 2026-11-06 |
| CVE-2026-69128 | NA | N/A | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data t… | 2026-11-06 |
| CVE-2026-77442 | MEDIUM | 5.9 | Ryot is a self-hosted personal tracking application. Prior to 10.4.0, the createOrUpdateUserIntegration GraphQ… | 2026-11-06 |
| CVE-2026-94618 | MEDIUM | 5.4 | FileGator is a multi-user file manager. Prior to 7.15.0, GET /batchdownload in backend/Controllers/DownloadCon… | 2026-11-06 |
| CVE-2026-94619 | MEDIUM | 5.9 | FileGator is a multi-user file manager. Prior to 7.15.0, POST /upload in backend/Controllers/UploadController.… | 2026-11-06 |
| CVE-2026-107931 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-109469 | CRITICAL | 10.0 | Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker … | 2026-11-06 |
| CVE-2026-118785 | MEDIUM | 6.7 | Improper handling of non-secure-world input in NSC veneer
functions of NXP MCUXpresso SDK TrustZone-M examples… | 2026-11-06 |
| CVE-2026-118786 | MEDIUM | 6.8 | Improper input validation in non-secure-callable (NSC)
veneer functions of the NXP MCUXpresso SDK rpmsg-lite m… | 2026-11-06 |
| CVE-2026-119519 | MEDIUM | 4.3 | Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting… | 2026-11-06 |
| CVE-2026-120845 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV… | 2026-11-06 |
| CVE-2026-120851 | MEDIUM | 4.3 | Missing Authorization vulnerability in PublishPress PublishPress Revisions revisionary allows Exploiting Incor… | 2026-11-06 |
| CVE-2026-122670 | MEDIUM | 5.4 | Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incorrectly Configured Ac… | 2026-11-06 |
| CVE-2026-123471 | MEDIUM | 4.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred m… | 2026-11-06 |
| CVE-2026-27356 | MEDIUM | 5.3 | Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configur… | 2026-11-06 |
| CVE-2026-122049 | LOW | 3.7 | A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file… | 2026-11-05 |
| CVE-2026-122050 | HIGH | 7.3 | A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This is… | 2026-11-05 |
| CVE-2026-122051 | CRITICAL | 10.0 | A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of … | 2026-11-05 |
| CVE-2026-109849 | MEDIUM | 6.5 | Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who ca… | 2026-11-05 |
| CVE-2026-122052 | MEDIUM | 4.3 | A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of t… | 2026-11-05 |
| CVE-2026-122144 | MEDIUM | 4.3 | A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0… | 2026-11-05 |
| CVE-2026-122146 | HIGH | 7.3 | A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of t… | 2026-11-05 |
| CVE-2026-122151 | MEDIUM | 4.3 | A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse… | 2026-11-05 |
| CVE-2025-66364 | NA | N/A | Continuously sending control‑plane messages causes the baseband to crashes.… | 2026-11-05 |
| CVE-2026-122154 | MEDIUM | 5.3 | A vulnerability was found in purocean Yank Note 3.93.0. This impacts the function config.getAll of the file sr… | 2026-11-05 |
| CVE-2026-122157 | MEDIUM | 6.3 | A vulnerability was identified in Purocean Yank Note 3.93.0. Affected by this vulnerability is the function ch… | 2026-11-05 |
| CVE-2026-122158 | MEDIUM | 4.7 | A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the f… | 2026-11-05 |
| CVE-2025-66365 | NA | N/A | Incorrect handling of SIP packets leads to baseband crashes… | 2026-11-05 |
| CVE-2025-66366 | NA | N/A | Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash… | 2026-11-05 |