| CVE-2026-123028 | HIGH | 7.3 | A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown f… | 2026-11-05 |
| CVE-2026-123059 | HIGH | 7.5 | In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keyc… | 2026-11-05 |
| CVE-2026-76563 | MEDIUM | 6.1 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Infor… | 2026-11-05 |
| CVE-2026-82902 | NA | N/A | Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a re… | 2026-11-05 |
| CVE-2026-82904 | NA | N/A | Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09.08 on all pla… | 2026-11-05 |
| CVE-2026-82907 | NA | N/A | Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on a… | 2026-11-05 |
| CVE-2026-82910 | NA | N/A | Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Ma… | 2026-11-05 |
| CVE-2026-82912 | NA | N/A | Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression Language Inj… | 2026-11-05 |
| CVE-2026-82916 | NA | N/A | Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote auth… | 2026-11-05 |
| CVE-2026-82960 | NA | N/A | Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms plugin bef… | 2026-11-05 |
| CVE-2026-83538 | NA | N/A | Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated a… | 2026-11-05 |
| CVE-2026-83542 | NA | N/A | Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platfor… | 2026-11-05 |
| CVE-2026-84183 | NA | N/A | Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layout/LayoutEvents… | 2026-11-05 |
| CVE-2026-84728 | NA | N/A | Incorrect Authorization in Apache OFBiz
24.09 before 24.09.08 on all platforms, when documented multitenancy … | 2026-11-05 |
| CVE-2026-85627 | NA | N/A | Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Ap… | 2026-11-05 |
| CVE-2026-92887 | NA | N/A | Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFB… | 2026-11-05 |
| CVE-2026-97355 | NA | N/A | Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platform… | 2026-11-05 |
| CVE-2026-97356 | NA | N/A | External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz… | 2026-11-05 |
| CVE-2026-106713 | NA | N/A | An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via … | 2026-11-05 |
| CVE-2026-106714 | NA | N/A | Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before … | 2026-11-05 |
| CVE-2026-106715 | NA | N/A | NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge … | 2026-11-05 |
| CVE-2026-106716 | NA | N/A | ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor:/… | 2026-11-05 |
| CVE-2026-115738 | MEDIUM | 6.5 | SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticate… | 2026-11-05 |
| CVE-2026-119744 | HIGH | 8.8 | Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess… | 2026-11-05 |
| CVE-2026-123032 | HIGH | 7.3 | A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c4787… | 2026-11-05 |
| CVE-2026-66903 | NA | N/A | Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended direc… | 2026-11-05 |
| CVE-2026-68524 | NA | N/A | An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a … | 2026-11-05 |
| CVE-2026-71901 | NA | N/A | Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz.
An authentic… | 2026-11-05 |
| CVE-2026-73577 | NA | N/A | Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remo… | 2026-11-05 |
| CVE-2026-73578 | NA | N/A | Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.09.08 on all pl… | 2026-11-05 |
| CVE-2026-73580 | NA | N/A | Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on all platforms allows… | 2026-11-05 |
| CVE-2026-74841 | NA | N/A | In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-sup… | 2026-11-05 |
| CVE-2026-76150 | NA | N/A | Path traversal and missing authorization check in the replaceImageToExistImage service in Apache OFBiz through… | 2026-11-05 |
| CVE-2026-76152 | NA | N/A | Path traversal and missing authorization check in the imageCrop and imageRotate services in Apache OFBiz throu… | 2026-11-05 |
| CVE-2026-81734 | NA | N/A | Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote … | 2026-11-05 |
| CVE-2026-81744 | NA | N/A | Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms al… | 2026-11-05 |
| CVE-2026-81808 | NA | N/A | Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a r… | 2026-11-05 |
| CVE-2026-81815 | NA | N/A | SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQ… | 2026-11-05 |
| CVE-2026-81816 | NA | N/A | XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms al… | 2026-11-05 |
| CVE-2026-81828 | NA | N/A | Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an … | 2026-11-05 |
| CVE-2026-82894 | NA | N/A | Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote… | 2026-11-05 |
| CVE-2019-16447 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16472 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16473 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16474 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16475 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16476 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16477 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16478 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |
| CVE-2019-16479 | NA | N/A | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05… | 2026-11-05 |