| CVE-2026-105606 | NA | N/A | Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 - An unauth… | 2026-11-02 |
| CVE-2026-117069 | NA | N/A | An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an una… | 2026-11-02 |
| CVE-2026-117127 | NA | N/A | Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive infor… | 2026-11-02 |
| CVE-2026-119731 | HIGH | 7.5 | Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment we… | 2026-11-02 |
| CVE-2026-119732 | MEDIUM | 6.5 | Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows… | 2026-11-02 |
| CVE-2026-119733 | HIGH | 8.1 | Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion… | 2026-11-02 |
| CVE-2026-119734 | MEDIUM | 6.5 | Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows… | 2026-11-02 |
| CVE-2026-119735 | MEDIUM | 5.4 | Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authe… | 2026-11-02 |
| CVE-2026-119736 | HIGH | 8.2 | Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded… | 2026-11-02 |
| CVE-2026-120057 | HIGH | 7.5 | psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent … | 2026-11-02 |
| CVE-2026-120058 | HIGH | 7.5 | psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count… | 2026-11-02 |
| CVE-2026-120059 | MEDIUM | 6.8 | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that… | 2026-11-02 |
| CVE-2026-120060 | MEDIUM | 5.9 | psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied ro… | 2026-11-02 |
| CVE-2026-120061 | HIGH | 7.5 | The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} es… | 2026-11-02 |
| CVE-2026-120062 | HIGH | 7.5 | SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without es… | 2026-11-02 |
| CVE-2026-120063 | MEDIUM | 5.9 | When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to… | 2026-11-02 |
| CVE-2026-120064 | HIGH | 7.5 | Several psqlODBC entry points use an application-supplied column number or row index as an array index without… | 2026-11-02 |
| CVE-2026-120065 | HIGH | 7.1 | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that c… | 2026-11-02 |
| CVE-2026-120066 | MEDIUM | 5.3 | On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from t… | 2026-11-02 |
| CVE-2026-120067 | MEDIUM | 5.9 | For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid … | 2026-11-02 |
| CVE-2026-120497 | MEDIUM | 5.0 | Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Wor… | 2026-11-02 |
| CVE-2026-120656 | NA | N/A | OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, w… | 2026-11-02 |
| CVE-2026-67186 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-02 |
| CVE-2026-81938 | HIGH | 7.7 | Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but t… | 2026-11-02 |
| CVE-2025-22436 | NA | N/A | In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapj… | 2026-11-02 |
| CVE-2025-26433 | NA | N/A | In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking… | 2026-11-02 |
| CVE-2026-0053 | NA | N/A | In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users… | 2026-11-02 |
| CVE-2026-102435 | CRITICAL | 9.8 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insuf… | 2026-11-02 |
| CVE-2026-116769 | NA | N/A | CVE-2026-116769 is an authentication bypass
vulnerability in Secure Access servers starting with version 13.0 … | 2026-11-02 |
| CVE-2026-117082 | NA | N/A | An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221… | 2026-11-02 |
| CVE-2026-119737 | HIGH | 7.8 | The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) T… | 2026-11-02 |
| CVE-2026-119738 | MEDIUM | 5.3 | The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox … | 2026-11-02 |
| CVE-2026-119739 | MEDIUM | 5.3 | The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox … | 2026-11-02 |
| CVE-2026-119740 | MEDIUM | 6.8 | Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an int… | 2026-11-02 |
| CVE-2026-120689 | NA | N/A | HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5B__iterate_helper() in src/H5B.c. Whe… | 2026-11-02 |
| CVE-2026-28588 | HIGH | 8.4 | In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected d… | 2026-11-02 |
| CVE-2026-28597 | NA | N/A | In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to im… | 2026-11-02 |
| CVE-2026-28621 | NA | N/A | In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permissi… | 2026-11-02 |
| CVE-2026-28632 | NA | N/A | In multiple locations, there is a possible way to share files across profiles due to a logic error in the code… | 2026-11-02 |
| CVE-2026-28643 | NA | N/A | In multiple locations, there is a possible denial of service due to a missing permission check. This could lea… | 2026-11-02 |
| CVE-2026-28645 | NA | N/A | In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data du… | 2026-11-02 |
| CVE-2026-28665 | NA | N/A | In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due … | 2026-11-02 |
| CVE-2026-45514 | NA | N/A | In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a… | 2026-11-02 |
| CVE-2026-49912 | NA | N/A | In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disabl… | 2026-11-02 |
| CVE-2026-49922 | NA | N/A | In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due t… | 2026-11-02 |
| CVE-2026-49923 | NA | N/A | In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic er… | 2026-11-02 |
| CVE-2026-49924 | NA | N/A | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts… | 2026-11-02 |
| CVE-2026-49931 | NA | N/A | In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a co… | 2026-11-02 |
| CVE-2026-49934 | NA | N/A | In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper in… | 2026-11-02 |
| CVE-2026-49935 | NA | N/A | In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusab… | 2026-11-02 |