| CVE-2026-125810 | MEDIUM | 4.3 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co… | 2026-11-13 |
| CVE-2026-125811 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in myCred m… | 2026-11-13 |
| CVE-2026-125819 | MEDIUM | 5.3 | Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Inco… | 2026-11-13 |
| CVE-2026-125821 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PT Norther Ligh… | 2026-11-13 |
| CVE-2026-125824 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Go Ma… | 2026-11-13 |
| CVE-2026-125825 | MEDIUM | 5.3 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Inc… | 2026-11-13 |
| CVE-2026-125827 | MEDIUM | 5.3 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting In… | 2026-11-13 |
| CVE-2026-125831 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox … | 2026-11-13 |
| CVE-2026-125834 | MEDIUM | 4.3 | Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Acces… | 2026-11-13 |
| CVE-2026-125835 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblo… | 2026-11-13 |
| CVE-2026-125837 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thetheme… | 2026-11-13 |
| CVE-2026-125851 | CRITICAL | 9.9 | Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Hotel Booking Lite hotel-booki… | 2026-11-13 |
| CVE-2026-125852 | HIGH | 7.7 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realt… | 2026-11-13 |
| CVE-2026-125853 | MEDIUM | 6.5 | Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrect… | 2026-11-13 |
| CVE-2026-125854 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unbounce… | 2026-11-13 |
| CVE-2026-125855 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing S… | 2026-11-13 |
| CVE-2026-125856 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Gi… | 2026-11-13 |
| CVE-2026-125858 | MEDIUM | 6.3 | Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectl… | 2026-11-13 |
| CVE-2026-127031 | NA | N/A | In Eclipse AAS4J before 3.0.1, `XmlSchemaValidator.validateSchema()` (and `AASXValidator.validateSchema()`, wh… | 2026-11-13 |
| CVE-2026-127102 | NA | N/A | In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Re… | 2026-11-13 |
| CVE-2026-128907 | MEDIUM | 4.3 | Missing authentication for a critical function (CWE-306) in the management service (uavmonitor_usbv1) of the 1… | 2026-11-13 |
| CVE-2026-128908 | HIGH | 8.8 | OS command injection (CWE-78) in the network-configuration handling of the management service (uavmonitor_usbv… | 2026-11-13 |
| CVE-2026-128909 | HIGH | 8.8 | Improper verification of cryptographic signature (CWE-347) in the firmware update handler of the management se… | 2026-11-13 |
| CVE-2026-128910 | MEDIUM | 6.8 | Use of hard-coded credentials (CWE-798) on the 1300 communications board in DJI AeroScope Mobile (TP703) firmw… | 2026-11-13 |
| CVE-2026-128970 | MEDIUM | 5.4 | Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 … | 2026-11-13 |
| CVE-2026-128990 | HIGH | 7.8 | xschem 2.9.9 through 3.4.7 contains a heap out-of-bounds write vulnerability in read_dataset() in src/rawtovcd… | 2026-11-13 |
| CVE-2026-128991 | MEDIUM | 5.3 | xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in read_xschem_file() in src/save.c th… | 2026-11-13 |
| CVE-2026-129092 | MEDIUM | 5.7 | CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability… | 2026-11-13 |
| CVE-2026-82175 | LOW | 3.8 | Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. A high-privileged attacker could … | 2026-11-13 |
| CVE-2024-58406 | HIGH | 7.5 | Huatian Dynamic OA8000 collaborative office system contains an unauthenticated path traversal vulnerability in… | 2026-11-13 |
| CVE-2026-103813 | CRITICAL | 9.1 | Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges … | 2026-11-13 |
| CVE-2026-105622 | NA | N/A | Improper restriction of excessive authentication attempts in the WAMP-CRA (challenge-response) authentication … | 2026-11-13 |
| CVE-2026-105623 | NA | N/A | The web interface in Zenitel Connect before 1.11.0 serves production JavaScript source maps without authentica… | 2026-11-13 |
| CVE-2026-105624 | NA | N/A | The login flow in Zenitel Connect before 1.11.0 applies per-account lockout on repeated failed login attempts,… | 2026-11-13 |
| CVE-2026-105625 | NA | N/A | The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin re… | 2026-11-13 |
| CVE-2026-105671 | NA | N/A | The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submi… | 2026-11-13 |
| CVE-2026-109091 | HIGH | 7.8 | A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server bef… | 2026-11-13 |
| CVE-2026-111545 | HIGH | 8.8 | Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerabi… | 2026-11-13 |
| CVE-2026-121808 | NA | N/A | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc_core and gr… | 2026-11-13 |
| CVE-2026-123635 | NA | N/A | Missing Release of Resource after Effective Lifetime vulnerability in elixir-grpc grpc_server allows a client … | 2026-11-13 |
| CVE-2026-124278 | NA | N/A | Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc_server and grpc allows an a… | 2026-11-13 |
| CVE-2026-126817 | MEDIUM | 6.5 | A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an a… | 2026-11-13 |
| CVE-2026-126818 | MEDIUM | 6.5 | A Ruby object-document mapper does not apply its automatic field-level encryption configuration to certain fie… | 2026-11-13 |
| CVE-2026-128034 | MEDIUM | 5.5 | In gittuf before 0.18.0, verification of file protection rules uses the quoted, escaped pathnames that Git pri… | 2026-11-13 |
| CVE-2026-128035 | MEDIUM | 5.5 | In gittuf 0.10.0 through 0.17.0, the verification workflow does not load policy updates that are propagated fr… | 2026-11-13 |
| CVE-2026-128036 | LOW | 2.3 | In gittuf 0.4.0 through 0.16.0, when a policy update appears within the range of reference state log entries b… | 2026-11-13 |
| CVE-2026-128037 | MEDIUM | 6.5 | In gittuf 0.10.0 through 0.15.0, when a minimum threshold global rule and a policy rule protect the same names… | 2026-11-13 |
| CVE-2026-129094 | MEDIUM | 4.7 | @utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to re… | 2026-11-13 |
| CVE-2026-129099 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrat… | 2026-11-13 |
| CVE-2026-129100 | HIGH | 7.2 | Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrat… | 2026-11-13 |