| CVE-2026-106137 | HIGH | 8.6 | In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory … | 2026-11-11 |
| CVE-2026-106152 | HIGH | 8.8 | In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configurati… | 2026-11-11 |
| CVE-2026-106156 | HIGH | 8.6 | In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side agg… | 2026-11-11 |
| CVE-2026-107247 | HIGH | 8.1 | An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to o… | 2026-11-11 |
| CVE-2026-107662 | HIGH | 8.8 | Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one age… | 2026-11-11 |
| CVE-2026-108558 | MEDIUM | 6.1 | A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and… | 2026-11-11 |
| CVE-2026-108559 | MEDIUM | 6.1 | A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and e… | 2026-11-11 |
| CVE-2026-108560 | MEDIUM | 6.1 | A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier all… | 2026-11-11 |
| CVE-2026-108561 | MEDIUM | 6.1 | A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and… | 2026-11-11 |
| CVE-2026-108562 | MEDIUM | 5.4 | A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and e… | 2026-11-11 |
| CVE-2026-108563 | MEDIUM | 4.7 | Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allow… | 2026-11-11 |
| CVE-2026-108564 | MEDIUM | 4.7 | A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6… | 2026-11-11 |
| CVE-2026-108565 | MEDIUM | 4.7 | A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and ea… | 2026-11-11 |
| CVE-2026-117373 | NA | N/A | Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal. The application accepts a caller… | 2026-11-11 |
| CVE-2026-61619 | NA | N/A | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web applicati… | 2026-11-11 |
| CVE-2026-62971 | HIGH | 7.2 | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web applicati… | 2026-11-11 |
| CVE-2026-64858 | MEDIUM | 5.3 | vulnerability-operator scans SBOMs and Images for vulnerabilities. Prior to version 0.28.16, an unauthenticate… | 2026-11-11 |
| CVE-2026-65820 | NA | N/A | aeon is a scikit-learn compatible Python library for learning from time series. Prior to version 1.5.0, a GitH… | 2026-11-11 |
| CVE-2026-68485 | MEDIUM | 4.3 | An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated mana… | 2026-11-11 |
| CVE-2026-68486 | MEDIUM | 5.4 | An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated … | 2026-11-11 |
| CVE-2026-68862 | MEDIUM | 6.6 | Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host pr… | 2026-11-11 |
| CVE-2026-77168 | MEDIUM | 4.3 | A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allo… | 2026-11-11 |
| CVE-2026-82978 | MEDIUM | 4.3 | An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manag… | 2026-11-11 |
| CVE-2026-86363 | MEDIUM | 5.5 | Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mod… | 2026-11-11 |
| CVE-2026-86364 | MEDIUM | 4.7 | Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulner… | 2026-11-11 |
| CVE-2026-91870 | HIGH | 7.4 | Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulne… | 2026-11-11 |
| CVE-2026-91871 | HIGH | 7.4 | Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vuln… | 2026-11-11 |
| CVE-2026-91872 | MEDIUM | 5.5 | Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information in… | 2026-11-11 |
| CVE-2026-91879 | HIGH | 8.8 | Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 throug… | 2026-11-11 |
| CVE-2026-91890 | HIGH | 8.7 | Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerab… | 2026-11-11 |
| CVE-2026-108472 | HIGH | 7.8 | A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied param… | 2026-11-11 |
| CVE-2026-119055 | NA | N/A | CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker … | 2026-11-11 |
| CVE-2026-123747 | HIGH | 7.3 | A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when ha… | 2026-11-11 |
| CVE-2026-123828 | MEDIUM | 5.9 | A one-byte heap buffer overflow in Node.js HTTP/2 Alt-Svc handling lets a remote, unauthenticated attacker cor… | 2026-11-11 |
| CVE-2026-123829 | LOW | 2.5 | A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the … | 2026-11-11 |
| CVE-2026-123862 | LOW | 2.9 | An uncatchable exception in the Node.js zlib streaming API lets a peer crash a process by disconnecting while … | 2026-11-11 |
| CVE-2026-123863 | HIGH | 8.2 | A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, ove… | 2026-11-11 |
| CVE-2026-123864 | HIGH | 8.1 | A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections,… | 2026-11-11 |
| CVE-2026-123865 | HIGH | 7.5 | An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer tr… | 2026-11-11 |
| CVE-2026-123866 | HIGH | 7.5 | A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other c… | 2026-11-11 |
| CVE-2026-123867 | MEDIUM | 4.2 | A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach … | 2026-11-11 |
| CVE-2026-123868 | MEDIUM | 5.9 | An unauthenticated HTTP/2 client can exhaust Node.js server memory because inbound DATA queued on an undrained… | 2026-11-11 |
| CVE-2026-123871 | MEDIUM | 6.2 | Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages. CVE-2026-48615 established tha… | 2026-11-11 |
| CVE-2026-123872 | HIGH | 8.1 | A client certificate authentication bypass in Node.js TLS lets a client change the servername during TLS 1.2 r… | 2026-11-11 |
| CVE-2026-123874 | HIGH | 7.5 | A use-after-free in Node.js HTTP/2 lets an unauthenticated client corrupt server memory, over both TLS and cle… | 2026-11-11 |
| CVE-2026-123875 | MEDIUM | 5.9 | A NULL pointer dereference in Node.js HTTP/2 lets an unauthenticated client crash the server, over both TLS an… | 2026-11-11 |
| CVE-2026-123877 | MEDIUM | 6.8 | A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA po… | 2026-11-11 |
| CVE-2026-126051 | HIGH | 7.5 | A deferred-callback use-after-destroy in Node.js TLS server handshake handling allows a remote, unauthenticate… | 2026-11-11 |
| CVE-2026-126766 | MEDIUM | 4.3 | OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to… | 2026-11-11 |
| CVE-2026-126767 | MEDIUM | 4.3 | OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclo… | 2026-11-11 |