| CVE-2026-69002 | NA | N/A | Incorrect authorization in Samsung framework services due to missing permission checks… | 2026-11-05 |
| CVE-2026-69005 | NA | N/A | Integer overflow in NPU driver parameter processing due to insufficient bounds checking.… | 2026-11-05 |
| CVE-2026-69006 | NA | N/A | Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.… | 2026-11-05 |
| CVE-2026-69025 | NA | N/A | In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds … | 2026-11-05 |
| CVE-2026-69043 | NA | N/A | In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead … | 2026-11-05 |
| CVE-2026-69044 | NA | N/A | In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corr… | 2026-11-05 |
| CVE-2026-69050 | NA | N/A | Out-of-bounds memory access in a device driver due to improper resource state tracking.… | 2026-11-05 |
| CVE-2026-69066 | NA | N/A | Memory corruption in GPU driver due to improper validation of VMID reservation.… | 2026-11-05 |
| CVE-2026-69068 | NA | N/A | Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.… | 2026-11-05 |
| CVE-2026-122190 | LOW | 2.4 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknow… | 2026-11-05 |
| CVE-2026-122191 | MEDIUM | 6.3 | A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown functio… | 2026-11-05 |
| CVE-2026-122236 | MEDIUM | 6.3 | A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component La… | 2026-11-05 |
| CVE-2026-104812 | MEDIUM | 6.4 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multi_media' Field … | 2026-11-05 |
| CVE-2026-116617 | HIGH | 8.1 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion i… | 2026-11-05 |
| CVE-2026-118193 | HIGH | 8.8 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalati… | 2026-11-05 |
| CVE-2026-120533 | MEDIUM | 6.4 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theme_opts Parameter… | 2026-11-05 |
| CVE-2026-120553 | MEDIUM | 6.4 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-11-05 |
| CVE-2026-123010 | HIGH | 7.2 | @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP … | 2026-11-05 |
| CVE-2026-123011 | MEDIUM | 4.2 | STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number … | 2026-11-05 |
| CVE-2026-123012 | NA | N/A | In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only … | 2026-11-05 |
| CVE-2026-93389 | HIGH | 8.2 | The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce … | 2026-11-05 |
| CVE-2025-15701 | NA | N/A | The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before o… | 2026-11-05 |
| CVE-2025-15702 | NA | N/A | The Cloud Blocks WordPress plugin through 1.1.8 does not perform any authorisation or sanitisation when storin… | 2026-11-05 |
| CVE-2026-100144 | NA | N/A | The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before u… | 2026-11-05 |
| CVE-2026-105259 | NA | N/A | The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of … | 2026-11-05 |
| CVE-2026-105971 | NA | N/A | The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict its unauthentica… | 2026-11-05 |
| CVE-2026-107773 | NA | N/A | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not cor… | 2026-11-05 |
| CVE-2026-107774 | NA | N/A | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not use… | 2026-11-05 |
| CVE-2026-107775 | NA | N/A | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not ver… | 2026-11-05 |
| CVE-2026-107786 | NA | N/A | The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort set… | 2026-11-05 |
| CVE-2026-107787 | NA | N/A | The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance actio… | 2026-11-05 |
| CVE-2026-109150 | NA | N/A | The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has … | 2026-11-05 |
| CVE-2026-123014 | NA | N/A | iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an a… | 2026-11-05 |
| CVE-2026-16304 | NA | N/A | The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the type of the us… | 2026-11-05 |
| CVE-2026-19256 | NA | N/A | The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that ca… | 2026-11-05 |
| CVE-2026-85346 | NA | N/A | The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF chec… | 2026-11-05 |
| CVE-2026-85347 | NA | N/A | The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplie… | 2026-11-05 |
| CVE-2026-85351 | NA | N/A | The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not validate a user-supplied URL befor… | 2026-11-05 |
| CVE-2026-85570 | NA | N/A | The Tutor LMS WordPress plugin before 4.2.0 does not prevent the correct answers to quiz questions from being… | 2026-11-05 |
| CVE-2026-86442 | NA | N/A | The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user s… | 2026-11-05 |
| CVE-2026-86795 | NA | N/A | The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its A… | 2026-11-05 |
| CVE-2026-87856 | NA | N/A | The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restricti… | 2026-11-05 |
| CVE-2026-88814 | NA | N/A | The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card'… | 2026-11-05 |
| CVE-2026-90963 | NA | N/A | The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-stat… | 2026-11-05 |
| CVE-2026-90964 | NA | N/A | The Essential Real Estate WordPress plugin before 5.3.5 does not restrict the recipient of one of its contact … | 2026-11-05 |
| CVE-2026-90965 | NA | N/A | The Essential Real Estate WordPress plugin before 5.3.5 does not perform a publication-status or authorization… | 2026-11-05 |
| CVE-2026-90966 | NA | N/A | The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a li… | 2026-11-05 |
| CVE-2026-90967 | NA | N/A | The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before renderi… | 2026-11-05 |
| CVE-2026-91049 | NA | N/A | The EWWW Image Optimizer WordPress plugin before 8.9.1 does not properly sanitize and restrict a value in post… | 2026-11-05 |
| CVE-2026-123017 | MEDIUM | 6.5 | GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grant_gold(10… | 2026-11-05 |