| CVE-2026-111362 | MEDIUM | 5.3 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
`django.contrib.… | 2026-11-03 |
| CVE-2026-113593 | LOW | 3.1 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
The `django.midd… | 2026-11-03 |
| CVE-2026-113733 | LOW | 2.2 | An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.10.
The `django.contrib.admin.utils.disp… | 2026-11-03 |
| CVE-2026-114582 | MEDIUM | 5.3 | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
`django.contrib.… | 2026-11-03 |
| CVE-2026-118487 | HIGH | 7.5 | In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-stomp creates a `Reco… | 2026-11-03 |
| CVE-2026-118505 | NA | N/A | Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic ash_authentication all… | 2026-11-03 |
| CVE-2026-119215 | NA | N/A | Authorization Bypass Through User-Controlled Key vulnerability in team-alembic ash_authentication allows a use… | 2026-11-03 |
| CVE-2026-119741 | HIGH | 7.5 | rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in… | 2026-11-03 |
| CVE-2026-120754 | NA | N/A | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Z… | 2026-11-03 |
| CVE-2026-120755 | NA | N/A | HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When d… | 2026-11-03 |
| CVE-2026-120756 | NA | N/A | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.… | 2026-11-03 |
| CVE-2026-120757 | NA | N/A | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal… | 2026-11-03 |
| CVE-2026-120758 | NA | N/A | HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_p… | 2026-11-03 |
| CVE-2026-121260 | CRITICAL | 9.1 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects the function loadst… | 2026-11-03 |
| CVE-2026-121450 | HIGH | 7.5 | CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holde… | 2026-11-03 |
| CVE-2026-121451 | HIGH | 8.8 | AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated b… | 2026-11-03 |
| CVE-2026-121452 | MEDIUM | 6.5 | bbs-go through 4.4.6 contains an improper certificate validation vulnerability that allows network-positioned … | 2026-11-03 |
| CVE-2026-121453 | LOW | 2.7 | SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authentic… | 2026-11-03 |
| CVE-2026-121454 | LOW | 3.7 | Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allow… | 2026-11-03 |
| CVE-2026-121455 | MEDIUM | 5.4 | DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authentic… | 2026-11-03 |
| CVE-2026-121543 | HIGH | 8.8 | smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any … | 2026-11-03 |
| CVE-2026-121544 | MEDIUM | 4.9 | Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handl… | 2026-11-03 |
| CVE-2026-121545 | MEDIUM | 6.5 | Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookRequestHandler::handleEven… | 2026-11-03 |
| CVE-2026-121546 | MEDIUM | 5.9 | ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticate… | 2026-11-03 |
| CVE-2026-121547 | LOW | 2.2 | Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to… | 2026-11-03 |
| CVE-2026-121548 | HIGH | 7.8 | Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers … | 2026-11-03 |
| CVE-2026-121549 | MEDIUM | 4.4 | nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows … | 2026-11-03 |
| CVE-2026-121550 | LOW | 3.3 | nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect write… | 2026-11-03 |
| CVE-2026-121551 | MEDIUM | 5.4 | PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mail… | 2026-11-03 |
| CVE-2026-121552 | MEDIUM | 4.3 | Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUse… | 2026-11-03 |
| CVE-2026-121553 | MEDIUM | 4.8 | Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(microtime()), allowin… | 2026-11-03 |
| CVE-2026-121554 | MEDIUM | 5.9 | cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks c… | 2026-11-03 |
| CVE-2026-121555 | HIGH | 7.5 | Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to r… | 2026-11-03 |
| CVE-2026-121556 | HIGH | 8.3 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in ProductController that all… | 2026-11-03 |
| CVE-2026-121557 | MEDIUM | 5.9 | WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated … | 2026-11-03 |
| CVE-2026-121558 | MEDIUM | 4.3 | AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/ag… | 2026-11-03 |
| CVE-2026-121559 | HIGH | 7.2 | GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows… | 2026-11-03 |
| CVE-2026-121560 | HIGH | 7.1 | LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated p… | 2026-11-03 |
| CVE-2026-121561 | HIGH | 7.7 | Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerabilit… | 2026-11-03 |
| CVE-2026-121562 | MEDIUM | 5.3 | CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint th… | 2026-11-03 |
| CVE-2026-121564 | NA | N/A | Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached … | 2026-11-03 |
| CVE-2026-121578 | MEDIUM | 6.1 | Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for var… | 2026-11-03 |
| CVE-2026-65107 | MEDIUM | 6.3 | NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcas… | 2026-11-03 |
| CVE-2026-65108 | MEDIUM | 6.3 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the sl… | 2026-11-03 |
| CVE-2026-65109 | MEDIUM | 4.7 | NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attack… | 2026-11-03 |
| CVE-2026-65138 | MEDIUM | 6.3 | NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be … | 2026-11-03 |
| CVE-2026-65139 | MEDIUM | 6.3 | NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to ar… | 2026-11-03 |
| CVE-2026-65140 | MEDIUM | 5.7 | NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the Slur… | 2026-11-03 |
| CVE-2026-65165 | MEDIUM | 5.3 | NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside th… | 2026-11-03 |
| CVE-2026-65168 | HIGH | 7.0 | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code… | 2026-11-03 |