| CVE-2026-55368 | HIGH | 8.1 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da4… | 2026-11-04 |
| CVE-2026-57562 | MEDIUM | 6.5 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive re… | 2026-11-04 |
| CVE-2026-57565 | MEDIUM | 6.5 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive re… | 2026-11-04 |
| CVE-2026-57566 | CRITICAL | 9.3 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive re… | 2026-11-04 |
| CVE-2026-57567 | HIGH | 8.6 | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive re… | 2026-11-04 |
| CVE-2026-58128 | MEDIUM | 6.2 | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allow… | 2026-11-04 |
| CVE-2026-63655 | HIGH | 7.5 | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the … | 2026-11-04 |
| CVE-2026-76893 | NA | N/A | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the … | 2026-11-04 |
| CVE-2026-97693 | CRITICAL | 9.9 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0… | 2026-11-04 |
| CVE-2026-102337 | NA | N/A | Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with a… | 2026-11-04 |
| CVE-2026-108387 | NA | N/A | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-contro… | 2026-11-04 |
| CVE-2026-115770 | CRITICAL | 9.6 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 un… | 2026-11-04 |
| CVE-2026-122028 | MEDIUM | 4.3 | A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknow… | 2026-11-04 |
| CVE-2026-122038 | HIGH | 7.3 | A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356… | 2026-11-04 |
| CVE-2026-122047 | HIGH | 7.3 | A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affe… | 2026-11-04 |
| CVE-2026-122048 | HIGH | 7.3 | A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.… | 2026-11-04 |
| CVE-2026-122299 | HIGH | 8.8 | Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit reso… | 2026-11-04 |
| CVE-2026-47678 | NA | N/A | GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, any authenticate… | 2026-11-04 |
| CVE-2026-52848 | NA | N/A | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an … | 2026-11-04 |
| CVE-2026-53631 | NA | N/A | GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9,… | 2026-11-04 |
| CVE-2026-54381 | HIGH | 7.5 | VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows u… | 2026-11-04 |
| CVE-2026-54382 | HIGH | 7.7 | VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued A… | 2026-11-04 |
| CVE-2026-54383 | MEDIUM | 6.5 | VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authent… | 2026-11-04 |
| CVE-2026-54384 | CRITICAL | 9.8 | VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attack… | 2026-11-04 |
| CVE-2026-57152 | NA | N/A | GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 until 11.0.8,… | 2026-11-04 |
| CVE-2026-62365 | MEDIUM | 5.3 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud wo… | 2026-11-04 |
| CVE-2026-62662 | HIGH | 7.7 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 1.11.0 u… | 2026-11-04 |
| CVE-2026-76826 | NA | N/A | tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3… | 2026-11-04 |
| CVE-2026-76892 | NA | N/A | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the … | 2026-11-04 |
| CVE-2026-77372 | NA | N/A | VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.30, the Unix, macOS,… | 2026-11-04 |
| CVE-2026-86041 | NA | N/A | ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 until 1.6.0, ezBookkeep… | 2026-11-04 |
| CVE-2026-97702 | MEDIUM | 5.3 | Open edX Platform enables the authoring and delivery of online learning at any scale. From the Ulmo release un… | 2026-11-04 |
| CVE-2026-120830 | HIGH | 7.4 | A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response, the length of the … | 2026-11-03 |
| CVE-2026-105770 | MEDIUM | 5.3 | Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to callers whose OIDC toke… | 2026-11-03 |
| CVE-2026-120833 | HIGH | 7.8 | labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relationa… | 2026-11-03 |
| CVE-2026-107441 | HIGH | 8.8 | An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAH… | 2026-11-03 |
| CVE-2026-120831 | MEDIUM | 6.5 | A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the… | 2026-11-03 |
| CVE-2026-76955 | HIGH | 8.8 | A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)… | 2026-11-03 |
| CVE-2026-111464 | MEDIUM | 5.9 | The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up t… | 2026-11-03 |
| CVE-2026-120518 | CRITICAL | 9.1 | The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versi… | 2026-11-03 |
| CVE-2026-120524 | MEDIUM | 6.4 | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'f… | 2026-11-03 |
| CVE-2026-120534 | CRITICAL | 9.8 | The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injection in all v… | 2026-11-03 |
| CVE-2026-120538 | HIGH | 8.1 | The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrato… | 2026-11-03 |
| CVE-2026-120544 | MEDIUM | 4.3 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to D… | 2026-11-03 |
| CVE-2026-120551 | MEDIUM | 5.3 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to authorization… | 2026-11-03 |
| CVE-2026-120552 | MEDIUM | 6.4 | The SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress plugin for WordPress is vulnerable to S… | 2026-11-03 |
| CVE-2026-120558 | HIGH | 7.2 | The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tr… | 2026-11-03 |
| CVE-2026-120559 | HIGH | 7.5 | The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due t… | 2026-11-03 |
| CVE-2026-120561 | MEDIUM | 5.3 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modificati… | 2026-11-03 |
| CVE-2026-120563 | MEDIUM | 4.9 | The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in … | 2026-11-03 |