| CVE-2026-121415 | LOW | 3.7 | Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 on MongoDB skips field type validation for null-va… | 2026-11-03 |
| CVE-2026-121416 | HIGH | 7.1 | SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the … | 2026-11-03 |
| CVE-2026-121417 | HIGH | 7.8 | SurrealDB before 3.3.0 contains a use-after-free vulnerability in surrealdb-core KV backends that pass borrowe… | 2026-11-03 |
| CVE-2026-121418 | MEDIUM | 4.3 | SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerability that allows record users t… | 2026-11-03 |
| CVE-2026-121419 | HIGH | 8.1 | SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject… | 2026-11-03 |
| CVE-2026-121420 | LOW | 3.3 | SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in the FilteringResolve… | 2026-11-03 |
| CVE-2026-121421 | MEDIUM | 4.3 | SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matchi… | 2026-11-03 |
| CVE-2026-121422 | MEDIUM | 4.1 | SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Ow… | 2026-11-03 |
| CVE-2026-121423 | MEDIUM | 6.5 | SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort … | 2026-11-03 |
| CVE-2026-121424 | MEDIUM | 6.5 | Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows rem… | 2026-11-03 |
| CVE-2026-121425 | MEDIUM | 6.5 | Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a … | 2026-11-03 |
| CVE-2026-121426 | MEDIUM | 6.5 | Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an an… | 2026-11-03 |
| CVE-2026-121427 | HIGH | 7.5 | AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for u… | 2026-11-03 |
| CVE-2026-121428 | HIGH | 8.8 | AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station mana… | 2026-11-03 |
| CVE-2026-121429 | HIGH | 8.8 | AzuraCast through 0.23.8 contains a command injection vulnerability that allows station users with Profile per… | 2026-11-03 |
| CVE-2026-121430 | MEDIUM | 5.4 | AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST /api/station/{stati… | 2026-11-03 |
| CVE-2026-121431 | MEDIUM | 5.3 | AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with We… | 2026-11-03 |
| CVE-2026-121432 | LOW | 3.5 | AzuraCast before 0.24.0 contains a CRLF injection vulnerability that allows low-privilege station users to inj… | 2026-11-03 |
| CVE-2026-121433 | MEDIUM | 5.4 | AzuraCast before 0.24.0 contains a stored CSV formula injection vulnerability that allows station users with M… | 2026-11-03 |
| CVE-2026-121434 | MEDIUM | 5.4 | Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certificates.add and Certificates.up… | 2026-11-03 |
| CVE-2026-121435 | MEDIUM | 4.3 | Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows authenticated customers to cr… | 2026-11-03 |
| CVE-2026-121436 | HIGH | 7.2 | Froxlor from 2.3.8 before 2.3.15 contains an information disclosure vulnerability that allows administrators w… | 2026-11-03 |
| CVE-2026-121437 | HIGH | 7.5 | Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exh… | 2026-11-03 |
| CVE-2026-121438 | MEDIUM | 5.3 | Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parse_link that allows attacke… | 2026-11-03 |
| CVE-2026-121439 | MEDIUM | 5.3 | Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-htt… | 2026-11-03 |
| CVE-2026-121440 | LOW | 3.7 | Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the WasiHttpH… | 2026-11-03 |
| CVE-2026-121441 | LOW | 3.7 | Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerabi… | 2026-11-03 |
| CVE-2026-121442 | MEDIUM | 4.3 | Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allows authenticated employees to v… | 2026-11-03 |
| CVE-2026-121443 | MEDIUM | 5.3 | svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers … | 2026-11-03 |
| CVE-2026-121444 | HIGH | 7.5 | svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in h… | 2026-11-03 |
| CVE-2026-121445 | MEDIUM | 5.9 | darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerabilit… | 2026-11-03 |
| CVE-2026-121446 | MEDIUM | 4.3 | svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to … | 2026-11-03 |
| CVE-2026-121447 | MEDIUM | 6.1 | svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanit… | 2026-11-03 |
| CVE-2026-121448 | HIGH | 8.3 | Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwr… | 2026-11-03 |
| CVE-2026-121449 | MEDIUM | 6.5 | Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack() attaches resolved sec… | 2026-11-03 |
| CVE-2026-121505 | LOW | 3.7 | An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_core) in NTPsec before… | 2026-11-03 |
| CVE-2026-121506 | HIGH | 7.4 | An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.… | 2026-11-03 |
| CVE-2026-121507 | MEDIUM | 5.9 | Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attacker to Cause DoS on … | 2026-11-03 |
| CVE-2026-121508 | MEDIUM | 5.9 | Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocat… | 2026-11-03 |
| CVE-2026-121510 | HIGH | 7.5 | Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthentica… | 2026-11-03 |
| CVE-2026-121511 | HIGH | 7.1 | Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause … | 2026-11-03 |
| CVE-2026-121512 | HIGH | 7.5 | Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to … | 2026-11-03 |
| CVE-2026-121513 | HIGH | 7.5 | Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause … | 2026-11-03 |
| CVE-2026-40652 | NA | N/A | An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to sup… | 2026-11-03 |
| CVE-2026-40659 | NA | N/A | An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to suppl… | 2026-11-03 |
| CVE-2026-40660 | NA | N/A | A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with… | 2026-11-03 |
| CVE-2026-40661 | NA | N/A | An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access… | 2026-11-03 |
| CVE-2026-43603 | NA | N/A | A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in deni… | 2026-11-03 |
| CVE-2026-108147 | MEDIUM | 5.3 | An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19.
`django.htt… | 2026-11-03 |
| CVE-2026-111211 | MEDIUM | 5.3 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
`django.contrib.… | 2026-11-03 |