| CVE-2026-64860 | NA | N/A | Rejected reason: Further research determined the issue is not a vulnerability.… | 2026-10-30 |
| CVE-2026-75882 | NA | N/A | An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attac… | 2026-10-30 |
| CVE-2026-87768 | NA | N/A | DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds.
_n… | 2026-10-30 |
| CVE-2026-91917 | HIGH | 8.0 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A lo… | 2026-10-30 |
| CVE-2026-100355 | LOW | 3.1 | Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a lin… | 2026-10-30 |
| CVE-2026-111498 | MEDIUM | 4.7 | OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high pr… | 2026-10-30 |
| CVE-2026-111499 | MEDIUM | 5.5 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical … | 2026-10-30 |
| CVE-2026-111500 | MEDIUM | 5.4 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function v… | 2026-10-30 |
| CVE-2026-112347 | HIGH | 7.6 | Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its pag… | 2026-10-30 |
| CVE-2026-112348 | MEDIUM | 6.5 | Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated … | 2026-10-30 |
| CVE-2026-115683 | MEDIUM | 6.8 | A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.
Epiph… | 2026-10-30 |
| CVE-2026-117028 | NA | N/A | Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultCh… | 2026-10-30 |
| CVE-2026-117350 | NA | N/A | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.… | 2026-10-30 |
| CVE-2026-118986 | NA | N/A | CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with r… | 2026-10-30 |
| CVE-2026-118987 | NA | N/A | CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie hea… | 2026-10-30 |
| CVE-2026-119528 | HIGH | 7.8 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size wh… | 2026-10-30 |
| CVE-2026-119542 | MEDIUM | 4.3 | A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can caus… | 2026-10-30 |
| CVE-2026-119569 | MEDIUM | 5.3 | Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability becau… | 2026-10-30 |
| CVE-2026-119570 | LOW | 3.1 | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows cli… | 2026-10-30 |
| CVE-2026-119571 | LOW | 3.7 | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updat… | 2026-10-30 |
| CVE-2026-119572 | HIGH | 8.7 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingres… | 2026-10-30 |
| CVE-2026-119573 | MEDIUM | 4.4 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that sk… | 2026-10-30 |
| CVE-2026-119574 | MEDIUM | 5.9 | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticate… | 2026-10-30 |
| CVE-2026-119575 | MEDIUM | 6.5 | ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows authentic… | 2026-10-30 |
| CVE-2026-119576 | MEDIUM | 4.3 | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with onl… | 2026-10-30 |
| CVE-2026-119577 | MEDIUM | 6.8 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain a… | 2026-10-30 |
| CVE-2026-119578 | HIGH | 7.8 | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() tha… | 2026-10-30 |
| CVE-2026-119596 | MEDIUM | 4.3 | UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows… | 2026-10-30 |
| CVE-2026-119597 | CRITICAL | 9.8 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated att… | 2026-10-30 |
| CVE-2026-119598 | MEDIUM | 4.3 | Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider… | 2026-10-30 |
| CVE-2026-119599 | MEDIUM | 4.3 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign… | 2026-10-30 |
| CVE-2026-119600 | MEDIUM | 4.8 | tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to re… | 2026-10-30 |
| CVE-2026-119601 | MEDIUM | 6.1 | AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers… | 2026-10-30 |
| CVE-2026-119602 | LOW | 3.7 | libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompress… | 2026-10-30 |
| CVE-2026-49115 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-10-30 |
| CVE-2026-49116 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-10-30 |
| CVE-2026-86715 | HIGH | 7.1 | Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Tr… | 2026-10-30 |
| CVE-2026-91912 | HIGH | 7.3 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerabi… | 2026-10-30 |
| CVE-2026-91913 | HIGH | 8.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements u… | 2026-10-30 |
| CVE-2026-91914 | HIGH | 7.1 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerabili… | 2026-10-30 |
| CVE-2026-91915 | MEDIUM | 6.8 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements i… | 2026-10-30 |
| CVE-2010-20125 | HIGH | 7.5 | DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthe… | 2026-10-30 |
| CVE-2015-20130 | MEDIUM | 6.1 | Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in web… | 2026-10-30 |
| CVE-2026-110799 | CRITICAL | 9.8 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior … | 2026-10-30 |
| CVE-2026-111487 | NA | N/A | An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.… | 2026-10-30 |
| CVE-2026-112905 | CRITICAL | 9.0 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior … | 2026-10-30 |
| CVE-2026-116860 | MEDIUM | 5.3 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Ac… | 2026-10-30 |
| CVE-2026-117346 | NA | N/A | Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit… | 2026-10-30 |
| CVE-2026-117349 | NA | N/A | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.… | 2026-10-30 |
| CVE-2026-119368 | MEDIUM | 5.3 | Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows E… | 2026-10-30 |