| CVE-2026-39777 | MEDIUM | 4.3 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting I… | 2026-11-03 |
| CVE-2026-97072 | MEDIUM | 4.3 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co… | 2026-11-03 |
| CVE-2026-116845 | MEDIUM | 5.4 | NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that … | 2026-11-03 |
| CVE-2026-121263 | MEDIUM | 6.3 | A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.1. The impacted element is the function Lo… | 2026-11-03 |
| CVE-2026-121624 | MEDIUM | 6.8 | Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulner… | 2026-11-03 |
| CVE-2026-121625 | LOW | 3.7 | GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP() in ProxyChannel… | 2026-11-03 |
| CVE-2026-121626 | LOW | 3.7 | GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbe… | 2026-11-03 |
| CVE-2026-121627 | MEDIUM | 6.1 | buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list th… | 2026-11-03 |
| CVE-2026-121628 | LOW | 3.7 | Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerability in manageCartRule() that … | 2026-11-03 |
| CVE-2026-44265 | HIGH | 7.4 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API a… | 2026-11-03 |
| CVE-2026-44266 | CRITICAL | 9.8 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/comp… | 2026-11-03 |
| CVE-2026-44267 | CRITICAL | 9.8 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, plain Elo strings supplied t… | 2026-11-03 |
| CVE-2026-63418 | HIGH | 7.0 | Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, check_icmp s… | 2026-11-03 |
| CVE-2026-63436 | MEDIUM | 6.1 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.0, the … | 2026-11-03 |
| CVE-2026-63492 | NA | N/A | Rejected reason: This CVE is a duplicate of another CVE.… | 2026-11-03 |
| CVE-2026-63494 | NA | N/A | Rejected reason: This CVE is a duplicate of another CVE.… | 2026-11-03 |
| CVE-2026-63499 | NA | N/A | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.1, ZipU… | 2026-11-03 |
| CVE-2026-112917 | NA | N/A | In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall… | 2026-11-03 |
| CVE-2026-119922 | HIGH | 8.8 | Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.… | 2026-11-03 |
| CVE-2026-120673 | MEDIUM | 5.5 | A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before… | 2026-11-03 |
| CVE-2026-120678 | HIGH | 7.5 | A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client libra… | 2026-11-03 |
| CVE-2026-120684 | MEDIUM | 6.5 | A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialize… | 2026-11-03 |
| CVE-2026-120953 | MEDIUM | 4.3 | A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an inte… | 2026-11-03 |
| CVE-2026-120954 | LOW | 3.7 | A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wrapar… | 2026-11-03 |
| CVE-2026-120955 | HIGH | 7.5 | The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under … | 2026-11-03 |
| CVE-2026-120956 | HIGH | 7.1 | The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a que… | 2026-11-03 |
| CVE-2026-121382 | HIGH | 7.5 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function m… | 2026-11-03 |
| CVE-2026-121501 | MEDIUM | 6.3 | A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project. The affected element is the functio… | 2026-11-03 |
| CVE-2026-121652 | MEDIUM | 5.4 | Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authent… | 2026-11-03 |
| CVE-2026-39379 | HIGH | 7.1 | GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.… | 2026-11-03 |
| CVE-2026-46487 | HIGH | 7.5 | GeoNetwork is a catalog application to manage spatially referenced resources. From 4.0.0-alpha.1 until 4.2.16 … | 2026-11-03 |
| CVE-2026-57154 | HIGH | 8.1 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, authenticated Web UI… | 2026-11-03 |
| CVE-2026-63197 | HIGH | 7.3 | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured wi… | 2026-11-03 |
| CVE-2026-63198 | HIGH | 7.3 | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, OAuth2 silent authoriza… | 2026-11-03 |
| CVE-2026-63417 | NA | N/A | Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / o… | 2026-11-03 |
| CVE-2026-82976 | HIGH | 7.1 | A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The … | 2026-11-03 |
| CVE-2025-71451 | MEDIUM | 6.1 | Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progre… | 2026-11-03 |
| CVE-2025-71452 | MEDIUM | 6.1 | Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progre… | 2026-11-03 |
| CVE-2026-105821 | NA | N/A | The Tapo
Cloud MQTT broker contains a broken access control vulnerability in a proxy
topic used by authenticat… | 2026-11-03 |
| CVE-2026-105822 | NA | N/A | The Tapo
Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability
because it accepts a use… | 2026-11-03 |
| CVE-2026-110826 | NA | N/A | Improper Session Invalidation after Authentication Credential Change vulnerability in team-alembic ash_authent… | 2026-11-03 |
| CVE-2026-120567 | MEDIUM | 5.4 | The MongoDB Entity Framework Core provider does not neutralize special elements when it places a caller-suppli… | 2026-11-03 |
| CVE-2026-121577 | NA | N/A | Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whats… | 2026-11-03 |
| CVE-2026-45146 | HIGH | 7.2 | Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authenticated adminis… | 2026-11-03 |
| CVE-2026-54161 | HIGH | 8.1 | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administerin… | 2026-11-03 |
| CVE-2026-63395 | HIGH | 8.8 | isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphi… | 2026-11-03 |
| CVE-2026-63433 | MEDIUM | 6.8 | MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, shouldSkipCsrfProte… | 2026-11-03 |
| CVE-2026-63434 | MEDIUM | 4.3 | MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, when statisticsEnab… | 2026-11-03 |
| CVE-2026-63469 | NA | N/A | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts … | 2026-11-03 |
| CVE-2026-63470 | NA | N/A | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts … | 2026-11-03 |