| CVE-2026-116666 | MEDIUM | 4.3 | Tanium addressed an information disclosure vulnerability in Discover.… | 2026-11-03 |
| CVE-2026-116667 | MEDIUM | 4.2 | Tanium addressed an improper access controls vulnerability in Discover.… | 2026-11-03 |
| CVE-2026-116668 | MEDIUM | 4.3 | Tanium addressed an uncontrolled resource consumption vulnerability in Discover.… | 2026-11-03 |
| CVE-2026-116669 | MEDIUM | 6.5 | Tanium addressed an improper access controls vulnerability in Discover.… | 2026-11-03 |
| CVE-2026-118237 | NA | N/A | An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). Wh… | 2026-11-03 |
| CVE-2026-120775 | HIGH | 7.2 | Tanium addressed a heap-based buffer overflow vulnerability in Deploy.… | 2026-11-03 |
| CVE-2026-121520 | NA | N/A | In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit … | 2026-11-03 |
| CVE-2026-121535 | LOW | 3.7 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the functio… | 2026-11-03 |
| CVE-2026-121539 | MEDIUM | 6.3 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the f… | 2026-11-03 |
| CVE-2026-121565 | HIGH | 7.4 | Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been upd… | 2026-11-03 |
| CVE-2026-121581 | MEDIUM | 4.3 | A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of… | 2026-11-03 |
| CVE-2026-121582 | MEDIUM | 6.5 | A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/r… | 2026-11-03 |
| CVE-2026-121727 | HIGH | 7.5 | Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauth… | 2026-11-03 |
| CVE-2026-121728 | MEDIUM | 5.3 | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthen… | 2026-11-03 |
| CVE-2026-121729 | HIGH | 8.3 | emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys… | 2026-11-03 |
| CVE-2026-121730 | MEDIUM | 6.5 | emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose tha… | 2026-11-03 |
| CVE-2026-121731 | HIGH | 8.8 | RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, inc… | 2026-11-03 |
| CVE-2026-121732 | LOW | 2.7 | RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrato… | 2026-11-03 |
| CVE-2026-121733 | MEDIUM | 5.4 | Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authenticated customers … | 2026-11-03 |
| CVE-2026-121734 | MEDIUM | 6.5 | ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administ… | 2026-11-03 |
| CVE-2026-121735 | LOW | 3.7 | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that al… | 2026-11-03 |
| CVE-2026-121736 | MEDIUM | 5.3 | NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/auth… | 2026-11-03 |
| CVE-2026-120276 | CRITICAL | 10.0 | A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function su… | 2026-11-02 |
| CVE-2026-120277 | CRITICAL | 10.0 | A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the functio… | 2026-11-02 |
| CVE-2026-120278 | MEDIUM | 5.3 | A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7… | 2026-11-02 |
| CVE-2026-120279 | CRITICAL | 10.0 | A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /… | 2026-11-02 |
| CVE-2026-120280 | CRITICAL | 10.0 | A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_c… | 2026-11-02 |
| CVE-2026-120281 | CRITICAL | 10.0 | A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protoco… | 2026-11-02 |
| CVE-2026-120282 | CRITICAL | 9.9 | A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file… | 2026-11-02 |
| CVE-2026-120283 | CRITICAL | 10.0 | A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /ww… | 2026-11-02 |
| CVE-2026-120319 | MEDIUM | 6.3 | A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function TradeRefundService.updat… | 2026-11-02 |
| CVE-2026-120320 | MEDIUM | 4.7 | A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function Workf… | 2026-11-02 |
| CVE-2026-120322 | CRITICAL | 9.9 | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of… | 2026-11-02 |
| CVE-2026-120323 | MEDIUM | 4.3 | A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function o… | 2026-11-02 |
| CVE-2026-120309 | LOW | 3.7 | Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRoute… | 2026-11-02 |
| CVE-2026-120310 | LOW | 3.1 | Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object update respo… | 2026-11-02 |
| CVE-2026-120311 | HIGH | 8.8 | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attac… | 2026-11-02 |
| CVE-2026-120312 | HIGH | 8.8 | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers… | 2026-11-02 |
| CVE-2026-120313 | HIGH | 7.5 | Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows … | 2026-11-02 |
| CVE-2026-120314 | HIGH | 7.3 | Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class th… | 2026-11-02 |
| CVE-2026-120315 | HIGH | 8.8 | LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated user… | 2026-11-02 |
| CVE-2026-120316 | MEDIUM | 5.9 | http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload … | 2026-11-02 |
| CVE-2026-120317 | MEDIUM | 5.9 | http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder co… | 2026-11-02 |
| CVE-2026-120324 | HIGH | 8.3 | A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected element is the func… | 2026-11-02 |
| CVE-2026-120325 | MEDIUM | 6.3 | A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the functio… | 2026-11-02 |
| CVE-2026-120334 | MEDIUM | 4.3 | A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretra… | 2026-11-02 |
| CVE-2026-120335 | MEDIUM | 4.8 | A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load … | 2026-11-02 |
| CVE-2026-20499 | NA | N/A | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote esc… | 2026-11-02 |
| CVE-2026-20545 | NA | N/A | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote esc… | 2026-11-02 |
| CVE-2026-20546 | NA | N/A | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote … | 2026-11-02 |