CVE IDSeverityCVSSDescriptionDate
CVE-2026-113371NAN/ASonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal RE…2026-11-04
CVE-2026-113372NAN/ASonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account t…2026-11-04
CVE-2026-113373NAN/ASonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configu…2026-11-04
CVE-2026-113374NAN/ASonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth ca…2026-11-04
CVE-2026-115474MEDIUM6.5Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view …2026-11-04
CVE-2026-115574MEDIUM5.3Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels …2026-11-04
CVE-2026-121933CRITICAL10.0A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard…2026-11-04
CVE-2026-122192HIGH7.5Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest u…2026-11-04
CVE-2026-122220HIGH7.4WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay v…2026-11-04
CVE-2026-76806MEDIUM6.3Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-…2026-11-04
CVE-2026-97705HIGH7.5Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in …2026-11-04
CVE-2025-71453MEDIUM6.1vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlock…2026-11-04
CVE-2025-71454MEDIUM6.5vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include…2026-11-04
CVE-2025-71455MEDIUM5.3vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read th…2026-11-04
CVE-2025-71456HIGH8.1vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users …2026-11-04
CVE-2025-71457CRITICAL9.8vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attac…2026-11-04
CVE-2026-102339HIGH8.2Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the …2026-11-04
CVE-2026-102340HIGH8.5Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the …2026-11-04
CVE-2026-102664HIGH7.1ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decom…2026-11-04
CVE-2026-104203HIGH7.5Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mappi…2026-11-04
CVE-2026-105702MEDIUM4.3IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive …2026-11-04
CVE-2026-105991LOW3.5IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security r…2026-11-04
CVE-2026-108536MEDIUM4.6IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security r…2026-11-04
CVE-2026-108588MEDIUM5.4IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security r…2026-11-04
CVE-2026-108767MEDIUM4.3IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP resp…2026-11-04
CVE-2026-108838LOW3.3IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to…2026-11-04
CVE-2026-108910MEDIUM4.3IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive …2026-11-04
CVE-2026-10859HIGH7.5IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-110281MEDIUM5.9IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could all…2026-11-04
CVE-2026-110282MEDIUM6.5IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security r…2026-11-04
CVE-2026-110283MEDIUM4.3IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of…2026-11-04
CVE-2026-115758NAN/ASumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet() in src/base/Http_win.…2026-11-04
CVE-2026-115762MEDIUM6.1draw.io is a configurable diagramming and whiteboarding application. Prior to 31.1.5, the GraphML decoder cont…2026-11-04
CVE-2026-116376LOW3.4IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishin…2026-11-04
CVE-2026-11376HIGH8.8IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-11724HIGH8.5IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-121968MEDIUM6.5Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage() that …2026-11-04
CVE-2026-121969MEDIUM6.5netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage() in sh…2026-11-04
CVE-2026-122009HIGH7.3A flaw has been found in DataLinkDC Dinky up to 1.2.5. This vulnerability affects the function FlinkWebURITemp…2026-11-04
CVE-2026-122013CRITICAL10.0A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown funct…2026-11-04
CVE-2026-122014MEDIUM6.3A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model o…2026-11-04
CVE-2026-122126MEDIUM5.9reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader() …2026-11-04
CVE-2026-122127HIGH7.5CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauth…2026-11-04
CVE-2026-122129MEDIUM5.3CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_heade…2026-11-04
CVE-2026-122130HIGH8.2CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin …2026-11-04
CVE-2026-122131LOW3.7Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains a prototype pollution vulnerability in lib/messag…2026-11-04
CVE-2026-122132MEDIUM6.1go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that …2026-11-04
CVE-2026-122133HIGH8.8Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to…2026-11-04
CVE-2026-122134HIGH8.8Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run command…2026-11-04
CVE-2026-122135HIGH8.8Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands…2026-11-04
←136 / 8516→