| CVE-2026-108058 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108059 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-108060 | NA | N/A | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. In… | 2026-11-03 |
| CVE-2026-121458 | MEDIUM | 6.5 | Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP content read tools that al… | 2026-11-03 |
| CVE-2026-65160 | MEDIUM | 5.5 | NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. A successful exploit of… | 2026-11-03 |
| CVE-2026-76124 | HIGH | 8.8 | The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and inclu… | 2026-11-03 |
| CVE-2026-99270 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix potential UAF in reqsk_timer_han… | 2026-11-03 |
| CVE-2026-119179 | HIGH | 7.0 | A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled network connection … | 2026-11-03 |
| CVE-2026-119742 | HIGH | 7.2 | Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature where the ins… | 2026-11-03 |
| CVE-2026-120572 | NA | N/A | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firef… | 2026-11-03 |
| CVE-2026-85032 | MEDIUM | 4.8 | The MCTP over USB device class in subsys/pmci/mctp/mctp_usb.c splits RX handling across two threads: the syste… | 2026-11-03 |
| CVE-2026-85033 | MEDIUM | 4.6 | The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit st… | 2026-11-03 |
| CVE-2026-85034 | MEDIUM | 6.7 | The Bluetooth host's GATT client passed the value of a received Handle Value Notification, Handle Value Indica… | 2026-11-03 |
| CVE-2026-85035 | HIGH | 8.8 | The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq_put() in drivers/ca… | 2026-11-03 |
| CVE-2026-89295 | NA | N/A | In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the c… | 2026-11-03 |
| CVE-2026-100493 | NA | N/A | An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a cra… | 2026-11-03 |
| CVE-2026-106991 | HIGH | 7.1 | hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lo… | 2026-11-03 |
| CVE-2026-110265 | MEDIUM | 6.5 | A specially crafted malformed search query could return results from outside a user's organization. Log analys… | 2026-11-03 |
| CVE-2026-118488 | MEDIUM | 5.9 | In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on a… | 2026-11-03 |
| CVE-2026-118489 | HIGH | 7.5 | In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is shared across users… | 2026-11-03 |
| CVE-2026-118527 | MEDIUM | 4.3 | Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote au… | 2026-11-03 |
| CVE-2026-121386 | HIGH | 7.5 | FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and w… | 2026-11-03 |
| CVE-2026-121387 | MEDIUM | 4.3 | FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that all… | 2026-11-03 |
| CVE-2026-121388 | MEDIUM | 6.5 | FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malici… | 2026-11-03 |
| CVE-2026-121389 | LOW | 3.1 | FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows … | 2026-11-03 |
| CVE-2026-121390 | MEDIUM | 4.3 | FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway resp… | 2026-11-03 |
| CVE-2026-121391 | MEDIUM | 4.3 | FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to … | 2026-11-03 |
| CVE-2026-121392 | HIGH | 7.4 | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() th… | 2026-11-03 |
| CVE-2026-121393 | MEDIUM | 6.5 | FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers … | 2026-11-03 |
| CVE-2026-121394 | MEDIUM | 6.5 | FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malic… | 2026-11-03 |
| CVE-2026-121395 | MEDIUM | 6.5 | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verb… | 2026-11-03 |
| CVE-2026-121396 | MEDIUM | 4.3 | FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in … | 2026-11-03 |
| CVE-2026-121397 | MEDIUM | 4.3 | FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malic… | 2026-11-03 |
| CVE-2026-121398 | MEDIUM | 5.9 | FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-du… | 2026-11-03 |
| CVE-2026-121399 | MEDIUM | 4.3 | FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious… | 2026-11-03 |
| CVE-2026-121400 | MEDIUM | 6.5 | FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a m… | 2026-11-03 |
| CVE-2026-121401 | MEDIUM | 4.3 | FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a PKT_TYP… | 2026-11-03 |
| CVE-2026-121402 | MEDIUM | 6.5 | FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to c… | 2026-11-03 |
| CVE-2026-121403 | MEDIUM | 4.3 | FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with… | 2026-11-03 |
| CVE-2026-121404 | MEDIUM | 6.5 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticate… | 2026-11-03 |
| CVE-2026-121405 | MEDIUM | 4.3 | FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing mali… | 2026-11-03 |
| CVE-2026-121406 | MEDIUM | 4.3 | FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zg… | 2026-11-03 |
| CVE-2026-121407 | MEDIUM | 6.5 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread … | 2026-11-03 |
| CVE-2026-121408 | MEDIUM | 5.3 | FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redirection channel because FindChannelById … | 2026-11-03 |
| CVE-2026-121409 | MEDIUM | 5.9 | FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthentica… | 2026-11-03 |
| CVE-2026-121410 | MEDIUM | 4.3 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler t… | 2026-11-03 |
| CVE-2026-121411 | LOW | 3.1 | FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACET… | 2026-11-03 |
| CVE-2026-121412 | MEDIUM | 6.5 | FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that… | 2026-11-03 |
| CVE-2026-121413 | LOW | 3.1 | Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains an authorization bypass in the session up… | 2026-11-03 |
| CVE-2026-121414 | MEDIUM | 5.9 | Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 fails to contain a serialization error when an obj… | 2026-11-03 |