| CVE-2025-31704 | CRITICAL | 9.8 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a spec… | 2026-10-30 |
| CVE-2026-116366 | NA | N/A | An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticat… | 2026-10-30 |
| CVE-2026-22105 | NA | N/A | Delta UFC500 charging stations derive the default credentials of the Service account from character positions … | 2026-10-30 |
| CVE-2026-22109 | NA | N/A | The shipped WebUI template database retains the factory default passwords for all five account types in cleart… | 2026-10-30 |
| CVE-2026-22110 | NA | N/A | The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charge… | 2026-10-30 |
| CVE-2026-22114 | NA | N/A | HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace i… | 2026-10-30 |
| CVE-2026-85268 | NA | N/A | A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and … | 2026-10-30 |
| CVE-2025-68391 | NA | N/A | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to u… | 2026-10-30 |
| CVE-2025-68392 | NA | N/A | ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities … | 2026-10-30 |
| CVE-2025-68393 | NA | N/A | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutra… | 2026-10-30 |
| CVE-2025-68394 | NA | N/A | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutra… | 2026-10-30 |
| CVE-2025-68395 | NA | N/A | ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low … | 2026-10-30 |
| CVE-2026-101209 | LOW | 2.7 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerabili… | 2026-10-30 |
| CVE-2026-101210 | HIGH | 7.2 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements u… | 2026-10-30 |
| CVE-2026-101213 | HIGH | 7.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. … | 2026-10-30 |
| CVE-2026-101214 | HIGH | 7.2 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements u… | 2026-10-30 |
| CVE-2026-105924 | NA | N/A | A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.… | 2026-10-30 |
| CVE-2026-110970 | NA | N/A | Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct … | 2026-10-30 |
| CVE-2026-110971 | NA | N/A | Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to ea… | 2026-10-30 |
| CVE-2026-110972 | NA | N/A | Płatnik performs client-side authentication. An attacker with access to any application instance connected to … | 2026-10-30 |
| CVE-2026-111504 | HIGH | 7.2 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiter… | 2026-10-30 |
| CVE-2026-111505 | HIGH | 8.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements u… | 2026-10-30 |
| CVE-2026-119146 | MEDIUM | 5.6 | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans … | 2026-10-30 |
| CVE-2026-119147 | MEDIUM | 4.3 | ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handl… | 2026-10-30 |
| CVE-2026-119364 | MEDIUM | 5.3 | ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy tha… | 2026-10-30 |
| CVE-2026-119371 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMI… | 2026-10-30 |
| CVE-2026-119372 | MEDIUM | 5.5 | SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnera… | 2026-10-30 |
| CVE-2026-119373 | HIGH | 7.8 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes … | 2026-10-30 |
| CVE-2026-119374 | HIGH | 7.8 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attac… | 2026-10-30 |
| CVE-2026-119375 | MEDIUM | 5.5 | SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitiali… | 2026-10-30 |
| CVE-2026-119376 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMI… | 2026-10-30 |
| CVE-2026-119377 | LOW | 2.5 | SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorize… | 2026-10-30 |
| CVE-2026-119378 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to … | 2026-10-30 |
| CVE-2026-119379 | HIGH | 7.8 | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3… | 2026-10-30 |
| CVE-2026-119407 | HIGH | 7.1 | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters in loadSe… | 2026-10-30 |
| CVE-2026-119408 | HIGH | 8.8 | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability v… | 2026-10-30 |
| CVE-2026-119409 | HIGH | 7.2 | OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the Sys… | 2026-10-30 |
| CVE-2026-119414 | MEDIUM | 4.3 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability … | 2026-10-30 |
| CVE-2026-119415 | LOW | 3.7 | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to injec… | 2026-10-30 |
| CVE-2026-119416 | MEDIUM | 4.8 | CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCol… | 2026-10-30 |
| CVE-2026-119417 | LOW | 3.7 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an … | 2026-10-30 |
| CVE-2026-119418 | HIGH | 8.1 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying… | 2026-10-30 |
| CVE-2026-119419 | HIGH | 8.1 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying… | 2026-10-30 |
| CVE-2026-119420 | HIGH | 8.8 | Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to… | 2026-10-30 |
| CVE-2026-119421 | MEDIUM | 5.9 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerabi… | 2026-10-30 |
| CVE-2026-119422 | MEDIUM | 5.9 | Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated … | 2026-10-30 |
| CVE-2026-119423 | MEDIUM | 5.3 | OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to pl… | 2026-10-30 |
| CVE-2026-119424 | MEDIUM | 6.8 | OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated us… | 2026-10-30 |
| CVE-2026-119425 | MEDIUM | 5.4 | OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roam… | 2026-10-30 |
| CVE-2026-119426 | HIGH | 7.5 | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to e… | 2026-10-30 |