| CVE-2026-127217 | MEDIUM | 6.4 | Post to Google My Business plugin for WordPress before 3.5.7 contains a blind server-side request forgery vuln… | 2026-11-13 |
| CVE-2026-128124 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Application.a… | 2026-11-13 |
| CVE-2026-128125 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Set-Cookie pa… | 2026-11-13 |
| CVE-2026-128126 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Request.post(… | 2026-11-13 |
| CVE-2026-128127 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, BodyPartReade… | 2026-11-13 |
| CVE-2026-128128 | HIGH | 7.5 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the C WebSock… | 2026-11-13 |
| CVE-2026-128129 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, aiohttp buffe… | 2026-11-13 |
| CVE-2026-128130 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, when the pipe… | 2026-11-13 |
| CVE-2026-128131 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, aiohttp decom… | 2026-11-13 |
| CVE-2026-128132 | NA | N/A | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the WebSocket… | 2026-11-13 |
| CVE-2026-128133 | NA | N/A | Rejected reason: This CVE is a duplicate of another CVE.… | 2026-11-13 |
| CVE-2026-128885 | MEDIUM | 5.5 | A flaw was found in D-Bus. In configurations where the daemon falls back to using the Unix select() mechanism … | 2026-11-13 |
| CVE-2026-128987 | MEDIUM | 6.2 | A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service… | 2026-11-13 |
| CVE-2026-82504 | CRITICAL | 9.8 | VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in the upload hand… | 2026-11-13 |
| CVE-2026-89037 | MEDIUM | 6.5 | Dolibarr before 24.0.2 contains an insecure direct object reference vulnerability in the REST Documents API fo… | 2026-11-13 |
| CVE-2026-92738 | MEDIUM | 6.8 | Vault's Login MFA feature did not consistently enforce the lifetime of pending two-phase login requests. This … | 2026-11-13 |
| CVE-2025-43874 | NA | N/A | : Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ul… | 2026-11-13 |
| CVE-2025-53697 | NA | N/A | Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Joh… | 2026-11-13 |
| CVE-2025-53698 | NA | N/A | Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra an… | 2026-11-13 |
| CVE-2025-53699 | NA | N/A | Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, J… | 2026-11-13 |
| CVE-2025-53700 | NA | N/A | CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Contr… | 2026-11-13 |
| CVE-2026-102632 | NA | N/A | Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.… | 2026-11-13 |
| CVE-2026-108290 | MEDIUM | 4.0 | IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensit… | 2026-11-13 |
| CVE-2026-109158 | HIGH | 7.5 | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent t… | 2026-11-13 |
| CVE-2026-110178 | MEDIUM | 4.1 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import … | 2026-11-13 |
| CVE-2026-110189 | MEDIUM | 6.5 | IBM ContextForge MCP Gateway 1.0.8 through 1.0.11, and v1.1.0 is vulnerable to denial of service due to an in… | 2026-11-13 |
| CVE-2026-110194 | MEDIUM | 5.4 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to server-side request forgery (SSRF). This ma… | 2026-11-13 |
| CVE-2026-110195 | MEDIUM | 5.4 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream crede… | 2026-11-13 |
| CVE-2026-110199 | MEDIUM | 4.8 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to cross-site scripting. This vulnerability al… | 2026-11-13 |
| CVE-2026-110278 | HIGH | 7.4 | IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims… | 2026-11-13 |
| CVE-2026-110279 | HIGH | 8.1 | IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-U… | 2026-11-13 |
| CVE-2026-110330 | MEDIUM | 5.5 | A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socke… | 2026-11-13 |
| CVE-2026-110331 | HIGH | 7.8 | A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only… | 2026-11-13 |
| CVE-2026-114468 | MEDIUM | 6.0 | IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with… | 2026-11-13 |
| CVE-2026-115501 | MEDIUM | 5.3 | IBM i 7.3 7.4, 7.5, and 7.6 is vulnerable to a stack buffer overflow, caused by improper bounds checking in th… | 2026-11-13 |
| CVE-2026-115788 | HIGH | 8.1 | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log For… | 2026-11-13 |
| CVE-2026-123628 | HIGH | 7.5 | IBM webMethods Integration Server 10.15 and 11.1 could allow a remote attacker to obtain sensitive information… | 2026-11-13 |
| CVE-2026-124020 | HIGH | 8.1 | Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that all… | 2026-11-13 |
| CVE-2026-124021 | HIGH | 8.1 | Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the v… | 2026-11-13 |
| CVE-2026-128886 | MEDIUM | 6.2 | A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to con… | 2026-11-13 |
| CVE-2026-129137 | NA | N/A | Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 a… | 2026-11-13 |
| CVE-2026-19194 | MEDIUM | 5.9 | The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass tha… | 2026-11-13 |
| CVE-2026-5514 | LOW | 3.3 | IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. T… | 2026-11-13 |
| CVE-2026-82102 | MEDIUM | 6.4 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in… | 2026-11-13 |
| CVE-2026-91868 | MEDIUM | 6.5 | IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive i… | 2026-11-13 |
| CVE-2026-91869 | HIGH | 8.1 | IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security re… | 2026-11-13 |
| CVE-2026-94407 | MEDIUM | 6.5 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncont… | 2026-11-13 |
| CVE-2026-97683 | LOW | 2.5 | IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a miss… | 2026-11-13 |
| CVE-2026-9661 | HIGH | 7.0 | Poste Italiane Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability caused… | 2026-11-13 |
| CVE-2026-9821 | MEDIUM | 5.3 | IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to i… | 2026-11-13 |