| CVE-2026-123025 | NA | N/A | An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense… | 2026-11-05 |
| CVE-2026-123029 | HIGH | 7.5 | Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read lo… | 2026-11-05 |
| CVE-2026-123033 | HIGH | 8.3 | Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in … | 2026-11-05 |
| CVE-2026-100109 | CRITICAL | 9.8 | The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when cr… | 2026-11-05 |
| CVE-2026-107776 | LOW | 2.2 | The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's reverse-withdrawa… | 2026-11-05 |
| CVE-2026-109408 | HIGH | 7.4 | vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verificat… | 2026-11-05 |
| CVE-2026-112072 | MEDIUM | 6.5 | vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-js… | 2026-11-05 |
| CVE-2026-117679 | MEDIUM | 5.4 | A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute… | 2026-11-05 |
| CVE-2026-118869 | HIGH | 8.8 | An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execut… | 2026-11-05 |
| CVE-2026-123036 | MEDIUM | 5.5 | A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is censored before … | 2026-11-05 |
| CVE-2026-121489 | NA | N/A | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Juneau.… | 2026-11-05 |
| CVE-2026-123018 | HIGH | 8.3 | A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the function execut… | 2026-11-05 |
| CVE-2026-123019 | HIGH | 7.3 | A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is the function exec_module of the… | 2026-11-05 |
| CVE-2026-73095 | NA | N/A | Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.
The MessagePack parser, … | 2026-11-05 |
| CVE-2026-73098 | NA | N/A | Improper control of dynamically-loaded code vulnerability in Apache Juneau.
When Apache Juneau parses a value… | 2026-11-05 |
| CVE-2026-73099 | NA | N/A | Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau.
The REST server accepts a "content" query p… | 2026-11-05 |
| CVE-2026-73100 | NA | N/A | Insertion of Sensitive Information into Log File vulnerability in Apache Juneau.
The default REST server call… | 2026-11-05 |
| CVE-2026-73101 | NA | N/A | Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau.
The REST server … | 2026-11-05 |
| CVE-2026-73116 | NA | N/A | Insufficiently Protected Credentials vulnerability in Apache Juneau.
The Apache Juneau RestClient followed HT… | 2026-11-05 |
| CVE-2026-73117 | NA | N/A | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache … | 2026-11-05 |
| CVE-2026-96677 | NA | N/A | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache J… | 2026-11-05 |
| CVE-2026-103863 | NA | N/A | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache S… | 2026-11-05 |
| CVE-2026-103864 | NA | N/A | Improper output neutralization for logs in Apache Sling Engine.
This issue affects Apache Sling Engine: bef… | 2026-11-05 |
| CVE-2026-103866 | NA | N/A | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling… | 2026-11-05 |
| CVE-2026-123020 | MEDIUM | 6.3 | A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. The affected element is the fun… | 2026-11-05 |
| CVE-2026-123047 | HIGH | 7.5 | In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled … | 2026-11-05 |
| CVE-2026-123119 | NA | N/A | The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached host… | 2026-11-05 |
| CVE-2026-95652 | MEDIUM | 6.6 | Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute… | 2026-11-05 |
| CVE-2026-100168 | NA | N/A | Direct Request ('Forced Browsing') in the Content Manager component in Apache OFBiz 24.09.07 on all platforms … | 2026-11-05 |
| CVE-2026-100228 | NA | N/A | Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated u… | 2026-11-05 |
| CVE-2026-104720 | HIGH | 7.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Teleco… | 2026-11-05 |
| CVE-2026-105321 | HIGH | 7.5 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom … | 2026-11-05 |
| CVE-2026-105325 | NA | N/A | Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VI… | 2026-11-05 |
| CVE-2026-105330 | NA | N/A | Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all p… | 2026-11-05 |
| CVE-2026-105461 | NA | N/A | Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders… | 2026-11-05 |
| CVE-2026-107912 | HIGH | 7.7 | A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-h… | 2026-11-05 |
| CVE-2026-109129 | NA | N/A | Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on al… | 2026-11-05 |
| CVE-2026-109837 | NA | N/A | Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all… | 2026-11-05 |
| CVE-2026-109856 | NA | N/A | Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all … | 2026-11-05 |
| CVE-2026-109928 | NA | N/A | Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache … | 2026-11-05 |
| CVE-2026-114229 | NA | N/A | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image view… | 2026-11-05 |
| CVE-2026-114233 | NA | N/A | Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms all… | 2026-11-05 |
| CVE-2026-114235 | NA | N/A | Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platfor… | 2026-11-05 |
| CVE-2026-114271 | NA | N/A | Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24… | 2026-11-05 |
| CVE-2026-114272 | NA | N/A | Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before… | 2026-11-05 |
| CVE-2026-114277 | NA | N/A | Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz.
Apache OFBiz's optional Janrain… | 2026-11-05 |
| CVE-2026-117691 | CRITICAL | 9.1 | A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the se… | 2026-11-05 |
| CVE-2026-123022 | HIGH | 7.3 | A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function su… | 2026-11-05 |
| CVE-2026-123023 | HIGH | 7.3 | A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of … | 2026-11-05 |
| CVE-2026-123024 | HIGH | 7.3 | A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current… | 2026-11-05 |