| CVE-2026-68509 | MEDIUM | 6.3 | FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2325, shared at… | 2026-11-05 |
| CVE-2026-77596 | CRITICAL | 9.6 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-85068 | LOW | 2.4 | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administerin… | 2026-11-05 |
| CVE-2026-88979 | MEDIUM | 5.8 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 2.17.… | 2026-11-05 |
| CVE-2026-88980 | HIGH | 8.6 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-88981 | HIGH | 8.6 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-88982 | MEDIUM | 5.4 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-88984 | NA | N/A | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-92693 | HIGH | 8.2 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parse_raw_packet_to_s… | 2026-11-05 |
| CVE-2026-92694 | MEDIUM | 5.9 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top… | 2026-11-05 |
| CVE-2026-92695 | HIGH | 8.2 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parse_packet… | 2026-11-05 |
| CVE-2026-92697 | HIGH | 7.5 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collec… | 2026-11-05 |
| CVE-2026-92698 | HIGH | 8.2 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, process_sflow_flow_sa… | 2026-11-05 |
| CVE-2026-93424 | HIGH | 7.5 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peer_find_template() … | 2026-11-05 |
| CVE-2026-114549 | CRITICAL | 9.8 | NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allow… | 2026-11-04 |
| CVE-2026-114550 | HIGH | 8.1 | libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. Th… | 2026-11-04 |
| CVE-2026-114551 | MEDIUM | 5.9 | MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attac… | 2026-11-04 |
| CVE-2026-114552 | MEDIUM | 6.5 | MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability. This vulne… | 2026-11-04 |
| CVE-2026-118623 | HIGH | 7.8 | MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vu… | 2026-11-04 |
| CVE-2026-118624 | MEDIUM | 5.4 | MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability. This vulnerability all… | 2026-11-04 |
| CVE-2026-118625 | MEDIUM | 6.3 | MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows rem… | 2026-11-04 |
| CVE-2026-118626 | MEDIUM | 5.4 | MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability. This vulnerability all… | 2026-11-04 |
| CVE-2026-118627 | HIGH | 7.8 | MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnera… | 2026-11-04 |
| CVE-2026-118628 | HIGH | 8.2 | MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allo… | 2026-11-04 |
| CVE-2026-120631 | NA | N/A | CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires valu… | 2026-11-04 |
| CVE-2026-120632 | NA | N/A | CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/relate… | 2026-11-04 |
| CVE-2026-120633 | NA | N/A | CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and … | 2026-11-04 |
| CVE-2026-120634 | NA | N/A | CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warni… | 2026-11-04 |
| CVE-2026-120635 | NA | N/A | CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing… | 2026-11-04 |
| CVE-2026-120636 | NA | N/A | CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in… | 2026-11-04 |
| CVE-2026-120637 | NA | N/A | CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrec… | 2026-11-04 |
| CVE-2026-120638 | NA | N/A | CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application v… | 2026-11-04 |
| CVE-2026-120639 | NA | N/A | CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in h… | 2026-11-04 |
| CVE-2026-120640 | NA | N/A | CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set… | 2026-11-04 |
| CVE-2026-120641 | NA | N/A | CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Win… | 2026-11-04 |
| CVE-2026-120642 | NA | N/A | CGI versions before 5.00 for Perl return request-derived values untainted under taint mode.
The upload filena… | 2026-11-04 |
| CVE-2026-120643 | NA | N/A | CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned b… | 2026-11-04 |
| CVE-2026-120644 | NA | N/A | CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and ex… | 2026-11-04 |
| CVE-2026-120645 | NA | N/A | CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup se… | 2026-11-04 |
| CVE-2026-120646 | NA | N/A | CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbo… | 2026-11-04 |
| CVE-2026-120647 | NA | N/A | CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in… | 2026-11-04 |
| CVE-2026-120648 | NA | N/A | CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment.
Arguments are plac… | 2026-11-04 |
| CVE-2026-120650 | NA | N/A | CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size… | 2026-11-04 |
| CVE-2026-120651 | NA | N/A | CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set.… | 2026-11-04 |
| CVE-2026-121583 | MEDIUM | 6.3 | A vulnerability was identified in Sanluan PublicCMS 5. This affects the function TradePaymentService.pendingRe… | 2026-11-04 |
| CVE-2026-121585 | MEDIUM | 4.3 | A security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2. This impacts the function Ru… | 2026-11-04 |
| CVE-2026-121589 | MEDIUM | 5.3 | A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::v… | 2026-11-04 |
| CVE-2026-121597 | CRITICAL | 9.9 | A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasy… | 2026-11-04 |
| CVE-2026-92185 | HIGH | 7.2 | Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerabilit… | 2026-11-04 |
| CVE-2026-92186 | HIGH | 8.8 | Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerabili… | 2026-11-04 |