CVE IDSeverityCVSSDescriptionDate
CVE-2026-125366MEDIUM5.4Omnom through 0.9.0 contains a server-side request forgery vulnerability that allows authenticated users to ma…2026-11-10
CVE-2026-125367MEDIUM5.4Pico through 4.1.2 contains a server-side request forgery vulnerability in the feeds service that allows signe…2026-11-10
CVE-2026-125368HIGH7.5OmniAgent through commit 12b98c5 contains an approval bypass vulnerability in ReflexionAgent._is_safe_bash_com…2026-11-10
CVE-2026-125369MEDIUM5.3Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated …2026-11-10
CVE-2026-125370CRITICAL9.8Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote …2026-11-10
CVE-2026-125371MEDIUM4.8Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl…2026-11-10
CVE-2026-125372MEDIUM4.3REBUILD before 4.5.3 contains an authorization bypass vulnerability in FeedsListController fetchDetails and fe…2026-11-10
CVE-2026-125373MEDIUM5.4IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders…2026-11-10
CVE-2026-125374MEDIUM4.3Krayin CRM before 2.2.8 contains a broken object level authorization vulnerability in Lead TagController attac…2026-11-10
CVE-2026-125375MEDIUM5.4MrDoc through 1.1.1 contains a missing authorization vulnerability in the project_doc_sort and manage_project_…2026-11-10
CVE-2026-125376MEDIUM5.3VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers …2026-11-10
CVE-2026-125377MEDIUM6.5Pig before 4.1.2 contains a missing authorization vulnerability in SysClientController that allows authenticat…2026-11-10
CVE-2026-125378MEDIUM4.3PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler fo…2026-11-10
CVE-2026-125379LOW3.1Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authentic…2026-11-10
CVE-2026-125380MEDIUM6.5DataRoom through 3.0.0 contains an incorrect authorization vulnerability in DatasetController.runTest that all…2026-11-10
CVE-2026-125381MEDIUM5.3DataRoom through 3.0.0 contains an sql injection vulnerability in MyBatisService.generateSql that allows share…2026-11-10
CVE-2026-125382HIGH7.2Map-OS 5.0.0 to before 5.2.2 contains a privilege escalation vulnerability in the REST users API that allows n…2026-11-10
CVE-2026-125383CRITICAL9.8INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication…2026-11-10
CVE-2026-125384CRITICAL9.8INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated at…2026-11-10
CVE-2026-125385MEDIUM6.5INDOTALENT WHMS before 10.20261109 contains a path traversal vulnerability that allows authenticated users to …2026-11-10
CVE-2026-125386MEDIUM5.3langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMes…2026-11-10
CVE-2026-125387MEDIUM5.4Faveo Helpdesk through 2.0.3 contains an authorization bypass vulnerability in TicketController that allows au…2026-11-10
CVE-2026-125388MEDIUM6.5Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability th…2026-11-10
CVE-2026-125389MEDIUM6.1Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a stored cross-site scripting vulnerabil…2026-11-10
CVE-2026-125390MEDIUM6.5Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains an arbitrary local file read vulnerability in Fold…2026-11-10
CVE-2026-125391HIGH7.2Webmin through 2.670 contains an OS command injection vulnerability in samba/save_euser.cgi that allows authen…2026-11-10
CVE-2026-125392MEDIUM5.4Webmin through 2.670 contains a stored cross-site scripting vulnerability in bind8/edit_recs.cgi that outputs …2026-11-10
CVE-2026-125393MEDIUM6.5MailEnable Enterprise Premium before 10.62 contains a heap overflow vulnerability in the IMAP X-FB-FETCH comma…2026-11-10
CVE-2026-125394MEDIUM5.4FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_…2026-11-10
CVE-2026-125395MEDIUM5.4Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights…2026-11-10
CVE-2026-125396HIGH7.8Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gs_font…2026-11-10
CVE-2026-125397HIGH7.1NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmplo…2026-11-10
CVE-2026-125398HIGH7.1Instatic before 0.0.21 contains an authorization bypass vulnerability in handleRowAuthor that allows authentic…2026-11-10
CVE-2026-125399HIGH8.0Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which dec…2026-11-10
CVE-2026-125400HIGH8.8Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads …2026-11-10
CVE-2026-125401HIGH8.1Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/e…2026-11-10
CVE-2026-125402HIGH8.1Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src…2026-11-10
CVE-2026-125403HIGH8.1Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts(…2026-11-10
CVE-2026-125404HIGH7.5Ettercap through 0.8.4.1 contains an integer underflow in ccmp_decrypt() in src/ec_encryption_ccmp.c that subt…2026-11-10
CVE-2026-125405HIGH8.1Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/e…2026-11-10
CVE-2026-125406HIGH8.8Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/disse…2026-11-10
CVE-2026-107240HIGH7.6The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) …2026-11-10
CVE-2026-107241HIGH7.6The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) …2026-11-10
CVE-2026-107242NAN/AThe Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) …2026-11-10
CVE-2026-107243HIGH7.6The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) …2026-11-10
CVE-2026-107244HIGH7.6The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) …2026-11-10
CVE-2026-107245NAN/AVersa has confirmed a buffer overflow vulnerability in the IPsec implementation on VOS, aka Versa FlexVNF. …2026-11-10
CVE-2026-107246NAN/AThe Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, all…2026-11-10
CVE-2026-109793HIGH7.5SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header value…2026-11-10
CVE-2026-109794HIGH7.5SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resour…2026-11-10
←39 / 8516→