| CVE-2026-110931 | HIGH | 7.5 | A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management.… | 2026-11-05 |
| CVE-2026-110932 | HIGH | 7.5 | A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management sol… | 2026-11-05 |
| CVE-2026-111253 | MEDIUM | 6.6 | A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not ve… | 2026-11-05 |
| CVE-2026-112208 | HIGH | 8.1 | A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak… | 2026-11-05 |
| CVE-2026-114232 | HIGH | 8.1 | A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection … | 2026-11-05 |
| CVE-2026-118517 | MEDIUM | 4.3 | The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLink… | 2026-11-05 |
| CVE-2026-119083 | HIGH | 7.8 | Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a … | 2026-11-05 |
| CVE-2026-120499 | HIGH | 7.8 | h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbi… | 2026-11-05 |
| CVE-2026-121994 | HIGH | 8.8 | A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target… | 2026-11-05 |
| CVE-2026-121995 | HIGH | 7.5 | A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub… | 2026-11-05 |
| CVE-2026-121996 | HIGH | 8.2 | A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to r… | 2026-11-05 |
| CVE-2026-121997 | HIGH | 8.1 | A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achi… | 2026-11-05 |
| CVE-2026-123151 | NA | N/A | A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can… | 2026-11-05 |
| CVE-2026-49393 | HIGH | 8.4 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, … | 2026-11-05 |
| CVE-2026-49405 | MEDIUM | 6.2 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, … | 2026-11-05 |
| CVE-2026-49407 | HIGH | 7.7 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version … | 2026-11-05 |
| CVE-2026-54140 | HIGH | 8.3 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13,… | 2026-11-05 |
| CVE-2026-54141 | CRITICAL | 9.0 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13,… | 2026-11-05 |
| CVE-2026-54142 | HIGH | 8.7 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13,… | 2026-11-05 |
| CVE-2026-54143 | CRITICAL | 9.8 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version … | 2026-11-05 |
| CVE-2026-54144 | MEDIUM | 6.1 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 o… | 2026-11-05 |
| CVE-2026-54145 | HIGH | 8.8 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected ver… | 2026-11-05 |
| CVE-2026-54146 | HIGH | 8.8 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 be… | 2026-11-05 |
| CVE-2026-75599 | MEDIUM | 5.4 | HomeBox is a home inventory and organization system. Prior to 0.27.0, the maybeUrl() utility accepts markdown-… | 2026-11-05 |
| CVE-2026-75614 | HIGH | 8.1 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWho… | 2026-11-05 |
| CVE-2026-75615 | MEDIUM | 5.3 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function Acn_… | 2026-11-05 |
| CVE-2026-76077 | HIGH | 8.1 | ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT() in asn… | 2026-11-05 |
| CVE-2026-82413 | HIGH | 8.8 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts/lua/rest/v2/add/hos… | 2026-11-05 |
| CVE-2026-82965 | HIGH | 7.5 | A flaw was found in the SAML implementation of Keycloak, an open-source identity and access management solutio… | 2026-11-05 |
| CVE-2026-85287 | MEDIUM | 6.5 | HomeBox is a home inventory and organization system. Prior to 0.27.0, POST /api/v1/users/register and the user… | 2026-11-05 |
| CVE-2026-97371 | MEDIUM | 5.3 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_ma… | 2026-11-05 |
| CVE-2026-102927 | NA | N/A | HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.1, the WebSocket… | 2026-11-05 |
| CVE-2026-105607 | HIGH | 8.3 | Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget i… | 2026-11-05 |
| CVE-2026-107129 | MEDIUM | 5.5 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.… | 2026-11-05 |
| CVE-2026-107130 | NA | N/A | Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0… | 2026-11-05 |
| CVE-2026-107359 | MEDIUM | 6.5 | Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and earlier may result in a… | 2026-11-05 |
| CVE-2026-107903 | HIGH | 8.3 | Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0… | 2026-11-05 |
| CVE-2026-112109 | NA | N/A | A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an a… | 2026-11-05 |
| CVE-2026-112110 | MEDIUM | 6.3 | A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup fu… | 2026-11-05 |
| CVE-2026-115452 | MEDIUM | 6.7 | Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and S… | 2026-11-05 |
| CVE-2026-120859 | HIGH | 7.8 | PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5.1.15, 5.2.x before 5.2.14, an… | 2026-11-05 |
| CVE-2026-121949 | MEDIUM | 5.4 | The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attribut… | 2026-11-05 |
| CVE-2026-123184 | HIGH | 8.1 | An incorrect authorization vulnerability exists in the Altium 365 Git Service. The permission check performed … | 2026-11-05 |
| CVE-2026-54912 | NA | N/A | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, the t… | 2026-11-05 |
| CVE-2026-54913 | NA | N/A | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, load_… | 2026-11-05 |
| CVE-2026-54914 | NA | N/A | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, wasi_… | 2026-11-05 |
| CVE-2026-77439 | HIGH | 8.8 | Immich is a self-hosted photo and video management solution. Prior to 3.0.3, an authenticated user with editor… | 2026-11-05 |
| CVE-2026-92855 | HIGH | 7.4 | A flaw was found in the SAML identity broker component of Keycloak, which is used to delegate authentication t… | 2026-11-05 |
| CVE-2026-92857 | HIGH | 8.1 | Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register the… | 2026-11-05 |
| CVE-2026-93998 | HIGH | 7.4 | A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-bas… | 2026-11-05 |