CVE IDSeverityCVSSDescriptionDate
CVE-2026-122136MEDIUM4.4Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allow…2026-11-04
CVE-2026-122137MEDIUM6.7Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/i…2026-11-04
CVE-2026-122138MEDIUM5.3BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerability in LoginMi…2026-11-04
CVE-2026-122139MEDIUM5.3blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMi…2026-11-04
CVE-2026-122140MEDIUM5.8Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated att…2026-11-04
CVE-2026-122224HIGH8.1WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged …2026-11-04
CVE-2026-122233LOW3.7FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear l…2026-11-04
CVE-2026-122234MEDIUM4.7jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject marku…2026-11-04
CVE-2026-122235MEDIUM4.7Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that al…2026-11-04
CVE-2026-12356HIGH7.5IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-12538MEDIUM5.4IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker…2026-11-04
CVE-2026-12550MEDIUM5.4IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-13271HIGH8.1IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-13284HIGH7.1IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-13289HIGH7.1IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-13292HIGH8.8IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-14252MEDIUM6.2IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-16725MEDIUM6.5IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read a…2026-11-04
CVE-2026-17493HIGH7.5IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of se…2026-11-04
CVE-2026-18142HIGH7.1IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 throu…2026-11-04
CVE-2026-19319MEDIUM5.3IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive inf…2026-11-04
CVE-2026-82418CRITICAL9.8IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary co…2026-11-04
CVE-2026-97373MEDIUM5.8draw.io is a configurable diagramming and whiteboarding application. Prior to 30.3.8, the optional /proxy endp…2026-11-04
CVE-2026-102280NAN/ASandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process insi…2026-11-04
CVE-2026-102894CRITICAL9.1GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 …2026-11-04
CVE-2026-102895CRITICAL9.8GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.…2026-11-04
CVE-2026-103002HIGH8.8GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 …2026-11-04
CVE-2026-115473MEDIUM6.5Mongoose is an embedded web server and network library. Prior to 7.22, mg_path_is_sane in src/util.c read path…2026-11-04
CVE-2026-121745LOW2.5Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-121746MEDIUM5.5Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-121747MEDIUM5.5Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-121748LOW3.6Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-121749LOW3.3Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-121750LOW3.1Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-121751LOW3.1Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In vers…2026-11-04
CVE-2026-122015MEDIUM6.3A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx…2026-11-04
CVE-2026-122016MEDIUM6.3A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPerm…2026-11-04
CVE-2026-122019HIGH7.3A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the f…2026-11-04
CVE-2026-122020MEDIUM4.3A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the funct…2026-11-04
CVE-2026-122266HIGH8.7Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1…2026-11-04
CVE-2026-54372HIGH8.8VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validatio…2026-11-04
CVE-2026-54373LOW3.5VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that al…2026-11-04
CVE-2026-54374HIGH7.5VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability tha…2026-11-04
CVE-2026-54375HIGH8.4VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerabil…2026-11-04
CVE-2026-54376HIGH8.2VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerabili…2026-11-04
CVE-2026-54377MEDIUM6.5VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows au…2026-11-04
CVE-2026-54378CRITICAL9.6VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authentica…2026-11-04
CVE-2026-54379NAN/ARejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…2026-11-04
CVE-2026-54380MEDIUM5.4VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenti…2026-11-04
CVE-2026-55367HIGH7.5h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db…2026-11-04
←137 / 8516→