| CVE-2026-2613 | HIGH | 8.7 | The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in… | 2026-11-02 |
| CVE-2026-8923 | HIGH | 8.7 | Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authen… | 2026-11-02 |
| CVE-2024-9517 | MEDIUM | 4.9 | The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access to… | 2026-11-02 |
| CVE-2026-100140 | NA | N/A | An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.… | 2026-11-02 |
| CVE-2024-12141 | MEDIUM | 4.3 | The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious paylo… | 2026-11-02 |
| CVE-2026-111560 | NA | N/A | Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appli… | 2026-11-02 |
| CVE-2026-116606 | NA | N/A | An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthe… | 2026-11-02 |
| CVE-2026-91903 | MEDIUM | 6.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restri… | 2026-11-02 |
| CVE-2026-91904 | MEDIUM | 5.5 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical … | 2026-11-02 |
| CVE-2026-91905 | MEDIUM | 6.4 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signat… | 2026-11-02 |
| CVE-2026-91906 | MEDIUM | 5.5 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical … | 2026-11-02 |
| CVE-2026-91907 | MEDIUM | 6.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web P… | 2026-11-02 |
| CVE-2026-91908 | MEDIUM | 5.7 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signat… | 2026-11-02 |
| CVE-2026-91909 | MEDIUM | 4.6 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiter… | 2026-11-02 |
| CVE-2026-91910 | MEDIUM | 5.7 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restri… | 2026-11-02 |
| CVE-2026-91911 | MEDIUM | 6.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restri… | 2026-11-02 |
| CVE-2026-92886 | HIGH | 7.8 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register al… | 2026-11-02 |
| CVE-2026-94349 | HIGH | 8.0 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements u… | 2026-11-02 |
| CVE-2026-102801 | NA | N/A | Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere… | 2026-11-02 |
| CVE-2026-102802 | NA | N/A | Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with … | 2026-11-02 |
| CVE-2026-103419 | NA | N/A | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2… | 2026-11-02 |
| CVE-2026-103420 | NA | N/A | Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5… | 2026-11-02 |
| CVE-2026-105600 | NA | N/A | Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5… | 2026-11-02 |
| CVE-2026-105601 | NA | N/A | Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5… | 2026-11-02 |
| CVE-2026-105602 | NA | N/A | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultima… | 2026-11-02 |
| CVE-2026-109083 | NA | N/A | Improper isolation or compartmentalization vulnerability in Apache Syncope.
An administrator with adequate en… | 2026-11-02 |
| CVE-2026-110535 | NA | N/A | Improper Privilege Management vulnerability in Apache Syncope.
AuthProfile self-updates allow non-admin use… | 2026-11-02 |
| CVE-2026-111959 | NA | N/A | Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions… | 2026-11-02 |
| CVE-2026-113511 | NA | N/A | Authorization bypass through User-Controlled key vulnerability in Apache Syncope.
A delegated administrator… | 2026-11-02 |
| CVE-2026-113687 | NA | N/A | Improper isolation or compartmentalization vulnerability in Apache Syncope.
An administrator with adequate … | 2026-11-02 |
| CVE-2026-114364 | NA | N/A | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache S… | 2026-11-02 |
| CVE-2026-120463 | MEDIUM | 6.5 | Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that al… | 2026-11-02 |
| CVE-2026-74993 | HIGH | 7.5 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet … | 2026-11-02 |
| CVE-2025-62819 | NA | N/A | Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certifica… | 2026-11-02 |
| CVE-2025-71450 | LOW | 3.3 | inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attacke… | 2026-11-02 |
| CVE-2026-118052 | NA | N/A | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error wi… | 2026-11-02 |
| CVE-2026-120318 | HIGH | 7.2 | Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing a… | 2026-11-02 |
| CVE-2026-120425 | MEDIUM | 6.5 | Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoi… | 2026-11-02 |
| CVE-2026-120426 | HIGH | 7.5 | OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file re… | 2026-11-02 |
| CVE-2026-120427 | MEDIUM | 4.3 | MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_doctemp view that allows authent… | 2026-11-02 |
| CVE-2026-120428 | MEDIUM | 6.1 | PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticat… | 2026-11-02 |
| CVE-2026-120429 | HIGH | 7.1 | Camaleon CMS before 2.9.2 contains a missing authorization vulnerability in Admin::MediaController that allows… | 2026-11-02 |
| CVE-2026-120430 | MEDIUM | 5.4 | Camaleon CMS before 2.9.2 contains an insecure direct object reference vulnerability in Admin::CategoriesContr… | 2026-11-02 |
| CVE-2026-120431 | HIGH | 7.8 | Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow … | 2026-11-02 |
| CVE-2026-120432 | HIGH | 7.8 | Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that… | 2026-11-02 |
| CVE-2026-120433 | HIGH | 7.8 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow… | 2026-11-02 |
| CVE-2026-120434 | HIGH | 7.8 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow… | 2026-11-02 |
| CVE-2026-120435 | HIGH | 7.8 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpm… | 2026-11-02 |
| CVE-2026-120436 | HIGH | 7.8 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigto… | 2026-11-02 |
| CVE-2026-120437 | MEDIUM | 6.1 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnera… | 2026-11-02 |