| CVE-2026-120330 | NA | N/A | Backend actions and ajax routes of the mail module do not check whether the backend user has access to the pag… | 2026-11-03 |
| CVE-2026-120331 | NA | N/A | Content of external URL mails, their stylesheets and images to embed is fetched by the server without validati… | 2026-11-03 |
| CVE-2026-120332 | NA | N/A | The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with ac… | 2026-11-03 |
| CVE-2026-120333 | NA | N/A | The actions linked in the emails of the extension (e.g. to confirm a registration or the deletion of an accoun… | 2026-11-03 |
| CVE-2026-77691 | HIGH | 8.1 | ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input… | 2026-11-03 |
| CVE-2026-77777 | HIGH | 7.1 | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that all… | 2026-11-03 |
| CVE-2026-77778 | HIGH | 7.1 | ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates be… | 2026-11-03 |
| CVE-2026-89229 | NA | N/A | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component … | 2026-11-03 |
| CVE-2026-89292 | NA | N/A | In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated … | 2026-11-03 |
| CVE-2026-89293 | NA | N/A | In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated … | 2026-11-03 |
| CVE-2026-114442 | NA | N/A | Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in… | 2026-11-03 |
| CVE-2026-99243 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io-wq: order the exit bit against worker … | 2026-11-03 |
| CVE-2026-99244 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
pid_namespace: prevent TIF_NOTIFY_SIGNAL … | 2026-11-03 |
| CVE-2026-99245 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
KEYS: Fix key_reject_and_link() race with… | 2026-11-03 |
| CVE-2026-99246 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
tipc: protect node reset trace dump with … | 2026-11-03 |
| CVE-2026-99247 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
tracing: Do not initialize tracefs work i… | 2026-11-03 |
| CVE-2026-99248 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
i2c: xiic: restore non-managed runtime PM… | 2026-11-03 |
| CVE-2026-99249 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
pid_namespace: make zap_pid_ns_processes(… | 2026-11-03 |
| CVE-2026-99250 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
printk: Postpone kthread startup
There h… | 2026-11-03 |
| CVE-2026-99251 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: Avoid infinite retry loop in… | 2026-11-03 |
| CVE-2026-99252 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/mpscq: disable preemption while … | 2026-11-03 |
| CVE-2026-99253 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/cancel: rearm local work wake up… | 2026-11-03 |
| CVE-2026-99254 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring: don't flood a cancelling task w… | 2026-11-03 |
| CVE-2026-99255 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/io-wq: don't hide a link from ca… | 2026-11-03 |
| CVE-2026-99256 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
dm cache: fix issue with background work … | 2026-11-03 |
| CVE-2026-99257 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
gpio: shared: gracefully handle no-device… | 2026-11-03 |
| CVE-2026-99258 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
x86/hyperv: Avoid using per-cpu output pa… | 2026-11-03 |
| CVE-2026-99259 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
soc/tegra: pmc: Fix uninitialised clock r… | 2026-11-03 |
| CVE-2026-99260 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix resident conversion in ntfs_new… | 2026-11-03 |
| CVE-2026-99261 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: correct reservation fence slo… | 2026-11-03 |
| CVE-2026-99262 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/timeout: don't lose a cancel as … | 2026-11-03 |
| CVE-2026-99263 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/poll: avoid retry wakeup loss wh… | 2026-11-03 |
| CVE-2026-99264 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/net: don't retry recv on uncommi… | 2026-11-03 |
| CVE-2026-99265 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/openclose: keep the lock in io_p… | 2026-11-03 |
| CVE-2026-99266 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/zcrx: fix buffer offsets in area… | 2026-11-03 |
| CVE-2026-99267 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/napi: make stale entries time ou… | 2026-11-03 |
| CVE-2026-99268 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring: wake ring pollers for local tas… | 2026-11-03 |
| CVE-2026-99269 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Wait for SCX_OPSS_DISPATCHING … | 2026-11-03 |
| CVE-2026-108046 | NA | N/A | Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when process… | 2026-11-03 |
| CVE-2026-108047 | NA | N/A | Inadequate authorization vulnerability in Alosuite’s user invitation functionality. The ‘/Requests/userInvitat… | 2026-11-03 |
| CVE-2026-108048 | NA | N/A | Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality. The ‘/Account/res… | 2026-11-03 |
| CVE-2026-108049 | NA | N/A | Clickjacking vulnerability in the Alosuite web application. The affected login interface can be embedded in a … | 2026-11-03 |
| CVE-2026-108050 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108051 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108052 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108053 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108054 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108055 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108056 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108057 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |