CVE IDSeverityCVSSDescriptionDate
CVE-2026-8333NAN/AA stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated,…2026-11-12
CVE-2026-118855NAN/AAkaunting 3.3.0 contains a stored cross-site scripting vulnerability through invoice import. An authenticated …2026-11-12
CVE-2026-123133NAN/ARejected reason: This CVE ID is a duplicate of CVE-2026-116518 and was never published. Both IDs were assigned…2026-11-12
CVE-2026-125836HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Nicu Micle Simple JWT Login simple-jwt-login allows Cross S…2026-11-12
CVE-2026-126991NAN/AThe Wikidata Lookup expansion module (wiki.py) in MISP misp-modules contained a SPARQL injection vulnerability…2026-11-12
CVE-2026-40820MEDIUM4.9A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData…2026-11-12
CVE-2026-47832NAN/AThe vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-opensta…2026-11-12
CVE-2026-82292NAN/AA NULL pointer dereference vulnerability in the Qt Framework QDomDocument::setContent() XML parsing path of th…2026-11-12
CVE-2026-110003NAN/AA vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker …2026-11-12
CVE-2026-126642MEDIUM6.5An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Autom…2026-11-12
CVE-2026-90908NAN/AA vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows …2026-11-12
CVE-2026-106140HIGH7.3In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerabili…2026-11-12
CVE-2026-117474NAN/ARejected reason: none…2026-11-12
CVE-2026-117475NAN/ARejected reason: none…2026-11-12
CVE-2026-117476NAN/ARejected reason: none…2026-11-12
CVE-2026-118975MEDIUM6.5In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity ref…2026-11-12
CVE-2026-123765NAN/AImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache S…2026-11-12
CVE-2026-124617NAN/ARejected reason: 歸類為 JSONCPP Open Source 之問題…2026-11-12
CVE-2026-124699HIGH7.8In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerabilit…2026-11-12
CVE-2026-127016NAN/AThe MISP Modules website component exposes external tool management endpoints (add, delete, change status, and…2026-11-12
CVE-2026-76173NAN/ABlind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module …2026-11-12
CVE-2026-124023NAN/AOut-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML …2026-11-12
CVE-2026-124701HIGH7.8In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability e…2026-11-12
CVE-2026-124703HIGH7.8In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exi…2026-11-12
CVE-2026-124704HIGH7.8In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists…2026-11-12
CVE-2026-126641MEDIUM6.5A host key verification flaw was found in ansible-pylibssh and in the ansible.netcommon libssh connection plug…2026-11-12
CVE-2026-126643MEDIUM6.5A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the …2026-11-12
CVE-2026-126644LOW3.9A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the …2026-11-12
CVE-2026-114369NAN/AResource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSoc…2026-11-12
CVE-2026-124705HIGH7.8In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in …2026-11-12
CVE-2026-127036NAN/AImproper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS. This issue affect…2026-11-12
CVE-2026-127046NAN/AThe MISP Modules website component contains an information disclosure vulnerability in the external tools mana…2026-11-12
CVE-2026-13764HIGH8.8The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all v…2026-11-12
CVE-2026-15309HIGH8.8The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and inclu…2026-11-12
CVE-2026-16135HIGH8.8The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.…2026-11-12
CVE-2026-19421HIGH8.8Zohocorp ManageEngine DDI Central versions below 6301 is affected by a PowerShell injection vulnerability due …2026-11-12
CVE-2026-2982MEDIUM5.4The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip…2026-11-12
CVE-2026-110951HIGH7.5Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Com…2026-11-12
CVE-2026-111552HIGH7.1Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure…2026-11-12
CVE-2026-123139NAN/AImproper verification of the source of a communication channel vulnerability in Opera Neon on macOS and Window…2026-11-12
CVE-2026-125285NAN/AAuthentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted C…2026-11-12
CVE-2026-125870MEDIUM4.2BookStack before 26.09.3 contains a missing authorization vulnerability in ImageController::checkImagePermissi…2026-11-12
CVE-2026-126993MEDIUM5.3A security flaw has been discovered in SiteServer SSCMS up to 7.2.2. Impacted is an unknown function of the fi…2026-11-12
CVE-2026-126994MEDIUM6.3A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolve_type_kwargs of the…2026-11-12
CVE-2026-127050MEDIUM6.4Backup Migration before 2.1.8 for WordPress contains a path traversal vulnerability in its PclZip restore fall…2026-11-12
CVE-2026-127056HIGH7.5PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthe…2026-11-12
CVE-2026-19422CRITICAL9.1Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in…2026-11-12
CVE-2026-75864HIGH8.1Zohocorp ManageEngine DDI Central versions below 6301 is affected by an improper authorization vulnerability t…2026-11-12
CVE-2026-75867HIGH8.1Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability tha…2026-11-12
CVE-2026-75868HIGH8.1Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability tha…2026-11-12
←20 / 8516→