| CVE-2026-127119 | MEDIUM | 5.3 | Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler)… | 2026-11-12 |
| CVE-2026-127235 | MEDIUM | 6.1 | A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNM… | 2026-11-12 |
| CVE-2026-127236 | MEDIUM | 5.4 | An argument injection vulnerability exists in the ad-hoc RRD graph feature of multiple versions of OpenNMS Mer… | 2026-11-12 |
| CVE-2026-18379 | HIGH | 8.8 | A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achi… | 2026-11-12 |
| CVE-2024-21963 | NA | N/A | An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) page… | 2026-11-12 |
| CVE-2024-36344 | NA | N/A | Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with loca… | 2026-11-12 |
| CVE-2025-0043 | NA | N/A | Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker … | 2026-11-12 |
| CVE-2025-54507 | NA | N/A | Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could al… | 2026-11-12 |
| CVE-2026-0455 | NA | N/A | The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buf… | 2026-11-12 |
| CVE-2026-0460 | NA | N/A | Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a … | 2026-11-12 |
| CVE-2026-107152 | HIGH | 7.1 | An improper authentication vulnerability has been found in the task console in the smart_proxy_dynflow package… | 2026-11-12 |
| CVE-2026-107360 | CRITICAL | 9.6 | A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without … | 2026-11-12 |
| CVE-2026-107443 | HIGH | 7.7 | A flaw was found in Foreman. An authenticated user with view_hosts privileges can retrieve rendered provisioni… | 2026-11-12 |
| CVE-2026-111456 | HIGH | 7.1 | A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registratio… | 2026-11-12 |
| CVE-2026-124002 | CRITICAL | 9.8 | XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability … | 2026-11-12 |
| CVE-2026-124003 | HIGH | 7.8 | XWEB EVO before 5.6.2 contains a command injection vulnerability where the setuid-root Lua CGI interpreter wlu… | 2026-11-12 |
| CVE-2026-124004 | CRITICAL | 9.8 | XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote … | 2026-11-12 |
| CVE-2026-124005 | HIGH | 8.1 | XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to… | 2026-11-12 |
| CVE-2026-124006 | HIGH | 8.1 | XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to der… | 2026-11-12 |
| CVE-2026-124007 | HIGH | 8.1 | XWEB EVO before 5.6.2 contains a pre-authentication OS command injection vulnerability that allows unauthentic… | 2026-11-12 |
| CVE-2026-124008 | HIGH | 7.2 | XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability in the devices.lua t… | 2026-11-12 |
| CVE-2026-124009 | HIGH | 7.2 | XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenti… | 2026-11-12 |
| CVE-2026-124010 | CRITICAL | 9.8 | XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers … | 2026-11-12 |
| CVE-2026-124011 | MEDIUM | 5.3 | XWEB EVO 5.6.2 through 5.8.8 contains an information disclosure vulnerability that allows unauthenticated atta… | 2026-11-12 |
| CVE-2026-124012 | HIGH | 8.1 | XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account… | 2026-11-12 |
| CVE-2026-124013 | HIGH | 8.8 | XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua impor… | 2026-11-12 |
| CVE-2026-124014 | CRITICAL | 9.1 | XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote… | 2026-11-12 |
| CVE-2026-124015 | MEDIUM | 5.9 | XWEB EVO 5.6.2 through 5.8.8 contains an authentication bypass vulnerability that allows unauthenticated attac… | 2026-11-12 |
| CVE-2026-127120 | MEDIUM | 4.3 | A vulnerability was found in Governikus AusweisApp Mobile up to 2.5.5. This impacts an unknown function of the… | 2026-11-12 |
| CVE-2026-45265 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-45341 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to bef… | 2026-11-12 |
| CVE-2026-46674 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-46676 | MEDIUM | 5.3 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to bef… | 2026-11-12 |
| CVE-2026-46677 | MEDIUM | 6.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-47217 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-47257 | HIGH | 8.1 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.… | 2026-11-12 |
| CVE-2026-47258 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-47259 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-47710 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-47711 | HIGH | 8.6 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-52786 | HIGH | 7.1 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-12 |
| CVE-2026-68548 | CRITICAL | 9.4 | Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authori… | 2026-11-12 |
| CVE-2026-106018 | NA | N/A | Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Au… | 2026-11-12 |
| CVE-2026-126205 | MEDIUM | 5.3 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126206 | NA | N/A | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126207 | MEDIUM | 4.7 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126208 | MEDIUM | 4.7 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126209 | NA | N/A | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126793 | HIGH | 8.0 | An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from rele… | 2026-11-12 |
| CVE-2026-127206 | MEDIUM | 5.3 | Image CAPTCHA for Contact Form 7 and WPForms through 3.3.29 contains a CAPTCHA bypass vulnerability that allow… | 2026-11-12 |