| CVE-2026-121955 | HIGH | 7.5 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the em… | 2026-11-04 |
| CVE-2026-121956 | HIGH | 7.5 | FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which instal… | 2026-11-04 |
| CVE-2026-121957 | HIGH | 7.5 | FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt cli… | 2026-11-04 |
| CVE-2026-121958 | HIGH | 8.8 | FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_surface callback… | 2026-11-04 |
| CVE-2026-121959 | MEDIUM | 6.5 | FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a… | 2026-11-04 |
| CVE-2026-121960 | HIGH | 7.5 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredS… | 2026-11-04 |
| CVE-2026-121961 | MEDIUM | 5.9 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when interc… | 2026-11-04 |
| CVE-2026-121962 | HIGH | 8.1 | FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Earl… | 2026-11-04 |
| CVE-2026-121963 | MEDIUM | 5.9 | FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that … | 2026-11-04 |
| CVE-2026-121964 | HIGH | 7.5 | FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_rec… | 2026-11-04 |
| CVE-2026-121965 | MEDIUM | 5.3 | Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype pollution vulnerability when … | 2026-11-04 |
| CVE-2026-121966 | HIGH | 8.7 | Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX aut… | 2026-11-04 |
| CVE-2026-121967 | MEDIUM | 4.9 | Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before… | 2026-11-04 |
| CVE-2026-122032 | MEDIUM | 6.5 | SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back-office… | 2026-11-04 |
| CVE-2026-91163 | LOW | 3.7 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes proto… | 2026-11-04 |
| CVE-2026-91168 | MEDIUM | 6.8 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kuberne… | 2026-11-04 |
| CVE-2026-92704 | HIGH | 8.3 | SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earli… | 2026-11-04 |
| CVE-2026-119747 | HIGH | 7.1 | The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the che… | 2026-11-04 |
| CVE-2026-119748 | MEDIUM | 6.5 | The GetPaid plugin for WordPress before 2.8.63 contains an authorization bypass vulnerability that allows unau… | 2026-11-04 |
| CVE-2026-119749 | HIGH | 7.5 | The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows… | 2026-11-04 |
| CVE-2026-121926 | HIGH | 7.3 | A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected… | 2026-11-04 |
| CVE-2026-20241 | MEDIUM | 5.3 | A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive I… | 2026-11-04 |
| CVE-2026-76419 | MEDIUM | 6.1 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and… | 2026-11-04 |
| CVE-2026-76506 | HIGH | 7.6 | A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticat… | 2026-11-04 |
| CVE-2026-121927 | MEDIUM | 6.3 | A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _acc… | 2026-11-04 |
| CVE-2026-121971 | NA | N/A | The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_be… | 2026-11-04 |
| CVE-2026-122054 | MEDIUM | 5.9 | Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, i… | 2026-11-04 |
| CVE-2026-122116 | MEDIUM | 4.3 | Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-… | 2026-11-04 |
| CVE-2026-122118 | HIGH | 7.4 | In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeri… | 2026-11-04 |
| CVE-2026-57853 | HIGH | 8.8 | DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attac… | 2026-11-04 |
| CVE-2026-102345 | NA | N/A | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue-based ticket i… | 2026-11-04 |
| CVE-2026-107846 | NA | N/A | bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5.2.1, 6.1.8, and 7.0… | 2026-11-04 |
| CVE-2026-113780 | CRITICAL | 9.3 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.… | 2026-11-04 |
| CVE-2026-113782 | HIGH | 7.1 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5,… | 2026-11-04 |
| CVE-2026-113783 | HIGH | 7.4 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6,… | 2026-11-04 |
| CVE-2026-121928 | LOW | 3.5 | A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing … | 2026-11-04 |
| CVE-2026-121929 | LOW | 3.5 | A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unknown function of the … | 2026-11-04 |
| CVE-2026-121930 | CRITICAL | 9.1 | A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the … | 2026-11-04 |
| CVE-2026-121931 | CRITICAL | 9.1 | A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function sy… | 2026-11-04 |
| CVE-2026-121932 | CRITICAL | 10.0 | A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard… | 2026-11-04 |
| CVE-2026-122120 | CRITICAL | 9.0 | In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specif… | 2026-11-04 |
| CVE-2026-122124 | MEDIUM | 6.1 | On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi c… | 2026-11-04 |
| CVE-2026-122148 | NA | N/A | In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass v… | 2026-11-04 |
| CVE-2026-63183 | NA | N/A | OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth derives provi… | 2026-11-04 |
| CVE-2026-82029 | MEDIUM | 6.5 | Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-p… | 2026-11-04 |
| CVE-2026-82033 | HIGH | 8.4 | DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vu… | 2026-11-04 |
| CVE-2026-97701 | MEDIUM | 6.5 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, the authenticated POST… | 2026-11-04 |
| CVE-2026-113368 | NA | N/A | Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the… | 2026-11-04 |
| CVE-2026-113369 | NA | N/A | Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user a… | 2026-11-04 |
| CVE-2026-113370 | NA | N/A | Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By P… | 2026-11-04 |