| CVE-2026-114426 | NA | N/A | SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenti… | 2026-11-04 |
| CVE-2026-19721 | LOW | 3.3 | Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Re… | 2026-11-04 |
| CVE-2026-19731 | LOW | 3.3 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM… | 2026-11-04 |
| CVE-2026-108949 | NA | N/A | Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker.
An authenticated OpenWire clie… | 2026-11-04 |
| CVE-2026-110021 | MEDIUM | 6.2 | PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `Signatu… | 2026-11-04 |
| CVE-2026-110022 | HIGH | 8.4 | The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plug… | 2026-11-04 |
| CVE-2026-110935 | HIGH | 8.4 | The PFI plugin framework deployment routine does not validate path components when extracting archive entries … | 2026-11-04 |
| CVE-2026-111036 | NA | N/A | Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in t… | 2026-11-04 |
| CVE-2026-111037 | NA | N/A | A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS p… | 2026-11-04 |
| CVE-2026-111038 | NA | N/A | CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. Th… | 2026-11-04 |
| CVE-2026-111040 | NA | N/A | The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attack… | 2026-11-04 |
| CVE-2026-111821 | NA | N/A | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB.
A user can create a dur… | 2026-11-04 |
| CVE-2026-111822 | NA | N/A | Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Confi… | 2026-11-04 |
| CVE-2026-115498 | HIGH | 7.2 | The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website… | 2026-11-04 |
| CVE-2026-120422 | NA | N/A | Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool… | 2026-11-04 |
| CVE-2026-120554 | HIGH | 8.8 | The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all ve… | 2026-11-04 |
| CVE-2026-93900 | MEDIUM | 6.4 | The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-11-04 |
| CVE-2026-94459 | NA | N/A | IRISPowerscan contain
default user accounts with predictable credentials. An unauthenticated attacker
with acc… | 2026-11-04 |
| CVE-2026-94460 | NA | N/A | IRISPowerscan contain an insecure default
configuration where the built-in installation account is assigned el… | 2026-11-04 |
| CVE-2026-95649 | NA | N/A | IRISPowerscan insufficiently restrict the use of
untrusted scripts. An authenticated user with access to scrip… | 2026-11-04 |
| CVE-2026-100235 | NA | N/A | Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request ha… | 2026-11-04 |
| CVE-2026-100252 | NA | N/A | Improper Authorization vulnerability in Apache ZooKeeper.
When SASL authentication is enabled on the client p… | 2026-11-04 |
| CVE-2026-100300 | NA | N/A | Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able… | 2026-11-04 |
| CVE-2026-100302 | NA | N/A | Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allo… | 2026-11-04 |
| CVE-2026-102703 | NA | N/A | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities corresp… | 2026-11-04 |
| CVE-2026-102704 | NA | N/A | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities corresp… | 2026-11-04 |
| CVE-2026-103582 | NA | N/A | Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client… | 2026-11-04 |
| CVE-2026-108500 | NA | N/A | Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an a… | 2026-11-04 |
| CVE-2026-108946 | NA | N/A | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB.
The ActiveMQ broker res… | 2026-11-04 |
| CVE-2026-115448 | NA | N/A | Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by recursing one… | 2026-11-04 |
| CVE-2026-59263 | NA | N/A | A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displ… | 2026-11-04 |
| CVE-2026-59264 | NA | N/A | The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run exte… | 2026-11-04 |
| CVE-2026-59268 | NA | N/A | An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to c… | 2026-11-04 |
| CVE-2026-90624 | NA | N/A | An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a cra… | 2026-11-04 |
| CVE-2026-90626 | NA | N/A | An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a cra… | 2026-11-04 |
| CVE-2026-90627 | NA | N/A | The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read t… | 2026-11-04 |
| CVE-2026-90628 | NA | N/A | An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a cra… | 2026-11-04 |
| CVE-2026-90629 | NA | N/A | An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a cra… | 2026-11-04 |
| CVE-2026-90631 | LOW | 3.3 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allo… | 2026-11-04 |
| CVE-2026-90632 | NA | N/A | Apache OpenOffice documents can include multimedia content (audio, video, etc.)
A crafted document could expl… | 2026-11-04 |
| CVE-2026-90634 | HIGH | 7.3 | An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a cra… | 2026-11-04 |
| CVE-2026-104799 | HIGH | 8.8 | The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inclu… | 2026-11-04 |
| CVE-2026-114456 | MEDIUM | 6.5 | Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-on flow could h… | 2026-11-04 |
| CVE-2026-121925 | MEDIUM | 6.6 | A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific con… | 2026-11-04 |
| CVE-2026-59267 | NA | N/A | A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This cou… | 2026-11-04 |
| CVE-2026-97397 | HIGH | 7.2 | The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance plugin for WordPress… | 2026-11-04 |
| CVE-2026-107479 | NA | N/A | An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs… | 2026-11-04 |
| CVE-2026-118513 | NA | N/A | Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony versions prio… | 2026-11-04 |
| CVE-2026-118516 | NA | N/A | The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information diffe… | 2026-11-04 |
| CVE-2026-119468 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin N… | 2026-11-04 |