| CVE-2026-73328 | HIGH | 7.2 | Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allow… | 2026-11-03 |
| CVE-2026-97350 | NA | N/A | Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations an… | 2026-11-03 |
| CVE-2026-103077 | MEDIUM | 4.3 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co… | 2026-11-03 |
| CVE-2026-103916 | NA | N/A | Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can… | 2026-11-03 |
| CVE-2026-109593 | CRITICAL | 9.1 | An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to… | 2026-11-03 |
| CVE-2026-109594 | MEDIUM | 6.8 | Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne… | 2026-11-03 |
| CVE-2026-114183 | MEDIUM | 6.5 | Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-element… | 2026-11-03 |
| CVE-2026-114185 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes … | 2026-11-03 |
| CVE-2026-114187 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorre… | 2026-11-03 |
| CVE-2026-115289 | MEDIUM | 4.3 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure… | 2026-11-03 |
| CVE-2026-115290 | HIGH | 7.5 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Neste… | 2026-11-03 |
| CVE-2026-115292 | MEDIUM | 4.3 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information … | 2026-11-03 |
| CVE-2026-115293 | MEDIUM | 6.5 | Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to dis… | 2026-11-03 |
| CVE-2026-115294 | HIGH | 7.3 | Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to u… | 2026-11-03 |
| CVE-2026-115295 | MEDIUM | 4.3 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Ac… | 2026-11-03 |
| CVE-2026-115297 | MEDIUM | 6.5 | NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via… | 2026-11-03 |
| CVE-2026-115298 | MEDIUM | 4.3 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functional… | 2026-11-03 |
| CVE-2026-115710 | MEDIUM | 4.2 | Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure an… | 2026-11-03 |
| CVE-2026-115714 | HIGH | 7.4 | Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker ima… | 2026-11-03 |
| CVE-2026-115715 | MEDIUM | 6.5 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service … | 2026-11-03 |
| CVE-2026-115716 | MEDIUM | 6.5 | Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via… | 2026-11-03 |
| CVE-2026-116858 | MEDIUM | 4.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Formin… | 2026-11-03 |
| CVE-2026-116859 | MEDIUM | 5.3 | Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured… | 2026-11-03 |
| CVE-2026-119485 | MEDIUM | 5.3 | Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access… | 2026-11-03 |
| CVE-2026-119487 | MEDIUM | 5.3 | Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access… | 2026-11-03 |
| CVE-2026-119495 | MEDIUM | 5.3 | Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Co… | 2026-11-03 |
| CVE-2026-119509 | MEDIUM | 5.3 | Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protect… | 2026-11-03 |
| CVE-2026-119521 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmosla… | 2026-11-03 |
| CVE-2026-119672 | MEDIUM | 4.8 | MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id … | 2026-11-03 |
| CVE-2026-119673 | LOW | 2.8 | MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output p… | 2026-11-03 |
| CVE-2026-119674 | LOW | 3.7 | MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name read from metadata whe… | 2026-11-03 |
| CVE-2026-119675 | HIGH | 8.6 | MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collecti… | 2026-11-03 |
| CVE-2026-120843 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Pl… | 2026-11-03 |
| CVE-2026-120846 | MEDIUM | 5.3 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incor… | 2026-11-03 |
| CVE-2026-121259 | MEDIUM | 6.5 | A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause in… | 2026-11-03 |
| CVE-2026-121261 | MEDIUM | 4.3 | A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::load… | 2026-11-03 |
| CVE-2026-121262 | MEDIUM | 5.3 | A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of … | 2026-11-03 |
| CVE-2026-121587 | MEDIUM | 5.3 | Coolify before 4.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to… | 2026-11-03 |
| CVE-2026-121588 | MEDIUM | 6.1 | TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability that allows attackers t… | 2026-11-03 |
| CVE-2026-121602 | MEDIUM | 6.5 | Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious link… | 2026-11-03 |
| CVE-2026-121603 | MEDIUM | 6.5 | Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious link… | 2026-11-03 |
| CVE-2026-121604 | LOW | 3.3 | wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c t… | 2026-11-03 |
| CVE-2026-121631 | MEDIUM | 4.2 | Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability in the RenameService that all… | 2026-11-03 |
| CVE-2026-28327 | HIGH | 8.2 | SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during instal… | 2026-11-03 |
| CVE-2026-28335 | HIGH | 8.4 | SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code… | 2026-11-03 |
| CVE-2026-28336 | CRITICAL | 9.9 | SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compr… | 2026-11-03 |
| CVE-2026-38595 | NA | N/A | An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via upload… | 2026-11-03 |
| CVE-2026-38600 | NA | N/A | A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers t… | 2026-11-03 |
| CVE-2026-38601 | NA | N/A | A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any … | 2026-11-03 |
| CVE-2026-39743 | MEDIUM | 5.3 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting I… | 2026-11-03 |