| CVE-2026-63660 | HIGH | 8.1 | node-fontnik is a library that delivers a range of glyphs rendered as SDFs (signed distance fields) in a proto… | 2026-11-11 |
| CVE-2026-118368 | NA | N/A | Akaunting 3.3.0 contains a stored cross-site scripting vulnerability in the XLSX item-import workflow. An auth… | 2026-11-11 |
| CVE-2026-59191 | NA | N/A | TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP fu… | 2026-11-11 |
| CVE-2026-59192 | NA | N/A | TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP fu… | 2026-11-11 |
| CVE-2026-61810 | NA | N/A | libspdm is a sample implementation that follows the DMTF SPDM specifications. In version 1.4.0, both the FINIS… | 2026-11-11 |
| CVE-2026-64666 | HIGH | 7.1 | pam_usb provides hardware authentication for Linux using removable media. Prior to version 0.9.3, src/local.c … | 2026-11-11 |
| CVE-2026-64667 | MEDIUM | 4.4 | pam_usb provides hardware authentication for Linux using removable media. Prior to version 0.9.3, src/local.c … | 2026-11-11 |
| CVE-2026-64668 | HIGH | 7.4 | pam_usb provides hardware authentication for Linux using removable media. From version 0.8.0 to before version… | 2026-11-11 |
| CVE-2026-64669 | HIGH | 7.4 | pam_usb provides hardware authentication for Linux using removable media. From version 0.8.0 to before version… | 2026-11-11 |
| CVE-2026-64670 | CRITICAL | 9.3 | Waline is a comment system with backend support. In versions 3.15.2 and prior, @waline/client renders the comm… | 2026-11-11 |
| CVE-2026-64671 | HIGH | 7.2 | Waline is a comment system with backend support. In versions 3.15.2 and prior, the @waline/client UserList wid… | 2026-11-11 |
| CVE-2026-64678 | CRITICAL | 9.8 | NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store. Prior to version 4.… | 2026-11-11 |
| CVE-2026-64682 | CRITICAL | 9.8 | AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forge… | 2026-11-11 |
| CVE-2026-64686 | MEDIUM | 5.0 | OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From version… | 2026-11-11 |
| CVE-2026-97033 | NA | N/A | Building a malicious package that uses cgo could cause arbitrary code execution at build time through several … | 2026-11-11 |
| CVE-2026-97034 | NA | N/A | When using GCC, building a malicious package that uses cgo could cause arbitrary command execution at link tim… | 2026-11-11 |
| CVE-2026-97035 | NA | N/A | When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at b… | 2026-11-11 |
| CVE-2026-97036 | NA | N/A | On Darwin, building a malicious package that uses cgo could cause arbitrary code execution when using the Appl… | 2026-11-11 |
| CVE-2026-97037 | NA | N/A | Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker… | 2026-11-11 |
| CVE-2026-97038 | NA | N/A | Building a malicious package containing ".syso" files or cgo linker inputs could inject arbitrary linker flags… | 2026-11-11 |
| CVE-2026-97039 | NA | N/A | Building a malicious package that uses "#cgo pkg-config:" directives could load untrusted pkg-config ".pc" fil… | 2026-11-11 |
| CVE-2026-97040 | NA | N/A | Building a package containing a crafted ".syso" file could bypass cgo flag validation and inject arbitrary lin… | 2026-11-11 |
| CVE-2026-97041 | NA | N/A | Building a malicious package containing "//go:cgo_*" compiler directives could inject arbitrary flags into the… | 2026-11-11 |
| CVE-2026-97042 | NA | N/A | Building a malicious package that uses "//go:cgo_import_dynamic" or links against a crafted PE object on Windo… | 2026-11-11 |
| CVE-2026-97043 | NA | N/A | Building a malicious package that uses cgo could bypass "#cgo LDFLAGS" validation and cause unexpected code ex… | 2026-11-11 |
| CVE-2026-97054 | NA | N/A | For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set w… | 2026-11-11 |
| CVE-2025-15711 | NA | N/A | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings bef… | 2026-11-11 |
| CVE-2025-15712 | NA | N/A | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settin… | 2026-11-11 |
| CVE-2025-15713 | NA | N/A | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module… | 2026-11-11 |
| CVE-2025-15714 | NA | N/A | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module setti… | 2026-11-11 |
| CVE-2026-104718 | NA | N/A | The Elementor Website Builder WordPress plugin before 4.3.6 does not validate or escape an element identifier… | 2026-11-11 |
| CVE-2026-106468 | NA | N/A | The Code Snippets WordPress plugin before 4.1.0 does not verify network-level capabilities before honouring a … | 2026-11-11 |
| CVE-2026-109870 | NA | N/A | The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon appli… | 2026-11-11 |
| CVE-2026-109871 | NA | N/A | The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a payment has actually … | 2026-11-11 |
| CVE-2026-109873 | NA | N/A | The User Registration & Membership WordPress plugin before 5.3.2 does not enforce its payment-before-login re… | 2026-11-11 |
| CVE-2026-110016 | NA | N/A | The Data Tables Generator by Supsystic WordPress plugin before 1.15.8 does not perform any authorization or o… | 2026-11-11 |
| CVE-2026-110948 | NA | N/A | The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not v… | 2026-11-11 |
| CVE-2026-110949 | NA | N/A | The Download Manager WordPress plugin before 3.3.73, Download Manager WordPress plugin before 7.6.2 does not v… | 2026-11-11 |
| CVE-2026-111579 | NA | N/A | The Forminator Forms WordPress plugin before 1.58.4 does not enforce payment on the server side when a form's… | 2026-11-11 |
| CVE-2026-111597 | NA | N/A | The Forminator Forms WordPress plugin before 1.58.4 does not verify that a Stripe Checkout payment has comple… | 2026-11-11 |
| CVE-2026-115733 | NA | N/A | The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce … | 2026-11-11 |
| CVE-2026-115734 | NA | N/A | The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does… | 2026-11-11 |
| CVE-2026-115735 | NA | N/A | The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a us… | 2026-11-11 |
| CVE-2026-116081 | MEDIUM | 4.2 | Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. … | 2026-11-11 |
| CVE-2026-117521 | NA | N/A | The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not escape a… | 2026-11-11 |
| CVE-2026-117522 | NA | N/A | The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not escape t… | 2026-11-11 |
| CVE-2026-117523 | NA | N/A | The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform … | 2026-11-11 |
| CVE-2026-117524 | NA | N/A | The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform … | 2026-11-11 |
| CVE-2026-118041 | NA | N/A | The Contest Gallery WordPress plugin before 34.0.3 does not sanitise the name of files uploaded through its e… | 2026-11-11 |
| CVE-2026-118241 | NA | N/A | The Smush WordPress plugin before 4.3.6 does not verify that a user is authorised to act on the targeted medi… | 2026-11-11 |