CVE IDSeverityCVSSDescriptionDate
CVE-2026-120438HIGH7.8QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that c…2026-11-02
CVE-2026-120439HIGH7.0QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attack…2026-11-02
CVE-2026-120440MEDIUM5.3QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to…2026-11-02
CVE-2026-120441MEDIUM5.3OwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that al…2026-11-02
CVE-2026-120442CRITICAL9.8ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attack…2026-11-02
CVE-2026-120443MEDIUM6.1GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows unauthenticated attacke…2026-11-02
CVE-2026-120444HIGH8.1GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete …2026-11-02
CVE-2026-120445HIGH8.8madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware tha…2026-11-02
CVE-2026-120446CRITICAL9.4madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant managem…2026-11-02
CVE-2026-120447HIGH8.1HotGo through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to …2026-11-02
CVE-2026-120448HIGH8.1DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint t…2026-11-02
CVE-2026-120449MEDIUM5.3Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to r…2026-11-02
CVE-2026-120450MEDIUM4.3LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated us…2026-11-02
CVE-2026-120451MEDIUM6.8libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init(…2026-11-02
CVE-2026-120452MEDIUM5.4libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress()…2026-11-02
CVE-2026-120453LOW3.3The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in…2026-11-02
CVE-2026-120454MEDIUM5.5The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_att…2026-11-02
CVE-2026-120455MEDIUM6.1rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that …2026-11-02
CVE-2026-120456MEDIUM6.1L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dre…2026-11-02
CVE-2026-120457MEDIUM5.3libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows…2026-11-02
CVE-2026-120458MEDIUM5.5Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows at…2026-11-02
CVE-2026-120459HIGH7.4python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attacker…2026-11-02
CVE-2026-120460HIGH8.8Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated u…2026-11-02
CVE-2026-120461HIGH8.8Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that reso…2026-11-02
CVE-2026-120487HIGH7.2LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgra…2026-11-02
CVE-2026-120488MEDIUM5.4LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated user…2026-11-02
CVE-2026-120489MEDIUM4.3Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that all…2026-11-02
CVE-2026-120491MEDIUM5.4Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated we…2026-11-02
CVE-2026-120492MEDIUM5.4Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to …2026-11-02
CVE-2026-73695HIGH8.8Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users…2026-11-02
CVE-2026-73696CRITICAL9.1Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the…2026-11-02
CVE-2026-73697HIGH8.8Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection…2026-11-02
CVE-2026-104080HIGH8.4Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loo…2026-11-02
CVE-2026-109140HIGH8.4The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is r…2026-11-02
CVE-2026-109141HIGH8.4The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for e…2026-11-02
CVE-2026-109142HIGH8.4When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it …2026-11-02
CVE-2026-114408NAN/AIn Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, t…2026-11-02
CVE-2026-115653NAN/AIn Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves …2026-11-02
CVE-2026-115654NAN/AIn Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not ch…2026-11-02
CVE-2026-120500MEDIUM6.1An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_…2026-11-02
CVE-2026-120501MEDIUM5.3An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that al…2026-11-02
CVE-2026-16306NAN/ARemote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows …2026-11-02
CVE-2026-2102MEDIUM6.1wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP bi…2026-11-02
CVE-2026-77876CRITICAL9.8Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the pro…2026-11-02
CVE-2026-77877HIGH8.4Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allo…2026-11-02
CVE-2026-77878HIGH8.4Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loo…2026-11-02
CVE-2026-77879HIGH7.7Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback AP…2026-11-02
CVE-2026-77880HIGH8.4Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loo…2026-11-02
CVE-2026-77881MEDIUM6.2Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauth…2026-11-02
CVE-2026-88809HIGH7.6A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy). This endpoint i…2026-11-02
←157 / 8516→