| CVE-2026-119427 | MEDIUM | 4.2 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authent… | 2026-10-30 |
| CVE-2026-119428 | LOW | 3.7 | phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated atta… | 2026-10-30 |
| CVE-2026-119429 | MEDIUM | 4.3 | phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attacker… | 2026-10-30 |
| CVE-2026-119545 | MEDIUM | 5.3 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forge… | 2026-10-30 |
| CVE-2026-119546 | MEDIUM | 5.5 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerabil… | 2026-10-30 |
| CVE-2026-119547 | MEDIUM | 4.3 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure v… | 2026-10-30 |
| CVE-2026-119548 | LOW | 3.1 | Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that a… | 2026-10-30 |
| CVE-2026-119549 | HIGH | 7.1 | Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypas… | 2026-10-30 |
| CVE-2026-119550 | LOW | 3.5 | Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that… | 2026-10-30 |
| CVE-2026-119551 | MEDIUM | 6.5 | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions t… | 2026-10-30 |
| CVE-2026-119552 | MEDIUM | 4.8 | Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unaut… | 2026-10-30 |
| CVE-2026-119553 | MEDIUM | 6.5 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a pa… | 2026-10-30 |
| CVE-2026-119554 | MEDIUM | 5.9 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sq… | 2026-10-30 |
| CVE-2026-119555 | MEDIUM | 4.3 | Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain… | 2026-10-30 |
| CVE-2026-119556 | MEDIUM | 4.3 | Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain… | 2026-10-30 |
| CVE-2026-119557 | MEDIUM | 5.9 | n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unau… | 2026-10-30 |
| CVE-2026-119558 | LOW | 3.1 | OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpa… | 2026-10-30 |
| CVE-2026-119559 | MEDIUM | 5.9 | OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote… | 2026-10-30 |
| CVE-2026-119560 | MEDIUM | 5.9 | OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users … | 2026-10-30 |
| CVE-2026-119561 | MEDIUM | 6.8 | phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAsse… | 2026-10-30 |
| CVE-2026-119562 | MEDIUM | 4.2 | phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL… | 2026-10-30 |
| CVE-2026-119563 | MEDIUM | 5.4 | phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with … | 2026-10-30 |
| CVE-2026-119564 | MEDIUM | 5.3 | Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows… | 2026-10-30 |
| CVE-2026-119565 | MEDIUM | 4.3 | Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notificati… | 2026-10-30 |
| CVE-2026-119566 | MEDIUM | 4.8 | Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD o… | 2026-10-30 |
| CVE-2026-119567 | LOW | 3.1 | vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to ex… | 2026-10-30 |
| CVE-2026-119568 | HIGH | 7.4 | vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthen… | 2026-10-30 |
| CVE-2026-119586 | HIGH | 7.8 | SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command th… | 2026-10-30 |
| CVE-2026-119591 | MEDIUM | 5.5 | SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attack… | 2026-10-30 |
| CVE-2026-111501 | MEDIUM | 5.4 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authenticat… | 2026-10-30 |
| CVE-2026-111502 | MEDIUM | 4.3 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerab… | 2026-10-30 |
| CVE-2026-111503 | HIGH | 7.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements u… | 2026-10-30 |
| CVE-2026-112374 | MEDIUM | 4.3 | FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint… | 2026-10-30 |
| CVE-2026-115865 | NA | N/A | Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exh… | 2026-10-30 |
| CVE-2026-115866 | NA | N/A | Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when … | 2026-10-30 |
| CVE-2026-116127 | NA | N/A | Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response … | 2026-10-30 |
| CVE-2026-116128 | NA | N/A | Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding … | 2026-10-30 |
| CVE-2026-116130 | NA | N/A | HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request… | 2026-10-30 |
| CVE-2026-118988 | NA | N/A | CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path trav… | 2026-10-30 |
| CVE-2026-118990 | NA | N/A | CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp … | 2026-10-30 |
| CVE-2026-118991 | NA | N/A | CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES … | 2026-10-30 |
| CVE-2026-118992 | NA | N/A | CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restore… | 2026-10-30 |
| CVE-2026-118993 | NA | N/A | CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a reg… | 2026-10-30 |
| CVE-2026-118994 | NA | N/A | CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name.
login() write… | 2026-10-30 |
| CVE-2026-118995 | NA | N/A | CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidat… | 2026-10-30 |
| CVE-2026-118996 | NA | N/A | CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note vi… | 2026-10-30 |
| CVE-2026-119036 | NA | N/A | Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloa… | 2026-10-30 |
| CVE-2026-119037 | NA | N/A | Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is … | 2026-10-30 |
| CVE-2026-119038 | NA | N/A | Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token,… | 2026-10-30 |
| CVE-2026-13576 | NA | N/A | CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes.
Passwords are … | 2026-10-30 |