| CVE-2026-82292 | NA | N/A | A NULL pointer dereference vulnerability in the Qt Framework QDomDocument::setContent() XML parsing path of th… | 2026-11-12 |
| CVE-2026-110003 | NA | N/A | A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker … | 2026-11-12 |
| CVE-2026-126642 | MEDIUM | 6.5 | An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Autom… | 2026-11-12 |
| CVE-2026-90908 | NA | N/A | A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows … | 2026-11-12 |
| CVE-2026-106140 | HIGH | 7.3 | In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerabili… | 2026-11-12 |
| CVE-2026-117474 | NA | N/A | Rejected reason: none… | 2026-11-12 |
| CVE-2026-117475 | NA | N/A | Rejected reason: none… | 2026-11-12 |
| CVE-2026-117476 | NA | N/A | Rejected reason: none… | 2026-11-12 |
| CVE-2026-118975 | MEDIUM | 6.5 | In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity ref… | 2026-11-12 |
| CVE-2026-123765 | NA | N/A | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache S… | 2026-11-12 |
| CVE-2026-124617 | NA | N/A | Rejected reason: 歸類為 JSONCPP Open Source 之問題… | 2026-11-12 |
| CVE-2026-124699 | HIGH | 7.8 | In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerabilit… | 2026-11-12 |
| CVE-2026-127016 | NA | N/A | The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and… | 2026-11-12 |
| CVE-2026-76173 | NA | N/A | Blind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module … | 2026-11-12 |
| CVE-2026-124023 | NA | N/A | Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML … | 2026-11-12 |
| CVE-2026-124701 | HIGH | 7.8 | In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability e… | 2026-11-12 |
| CVE-2026-124703 | HIGH | 7.8 | In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exi… | 2026-11-12 |
| CVE-2026-124704 | HIGH | 7.8 | In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists… | 2026-11-12 |
| CVE-2026-126641 | MEDIUM | 6.5 | A host key verification flaw was found in ansible-pylibssh and in the ansible.netcommon libssh connection plug… | 2026-11-12 |
| CVE-2026-126643 | MEDIUM | 6.5 | A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the … | 2026-11-12 |
| CVE-2026-126644 | LOW | 3.9 | A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the … | 2026-11-12 |
| CVE-2026-114369 | NA | N/A | Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSoc… | 2026-11-12 |
| CVE-2026-124705 | HIGH | 7.8 | In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in … | 2026-11-12 |
| CVE-2026-127036 | NA | N/A | Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS.
This issue affect… | 2026-11-12 |
| CVE-2026-127046 | NA | N/A | The MISP Modules website component contains an information disclosure vulnerability in the external tools mana… | 2026-11-12 |
| CVE-2026-13764 | HIGH | 8.8 | The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all v… | 2026-11-12 |
| CVE-2026-15309 | HIGH | 8.8 | The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and inclu… | 2026-11-12 |
| CVE-2026-16135 | HIGH | 8.8 | The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.… | 2026-11-12 |
| CVE-2026-19421 | HIGH | 8.8 | Zohocorp ManageEngine DDI Central versions below 6301 is affected by a PowerShell injection vulnerability due … | 2026-11-12 |
| CVE-2026-2982 | MEDIUM | 5.4 | The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip… | 2026-11-12 |
| CVE-2026-110951 | HIGH | 7.5 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Com… | 2026-11-12 |
| CVE-2026-111552 | HIGH | 7.1 | Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure… | 2026-11-12 |
| CVE-2026-123139 | NA | N/A | Improper verification of the source of a communication channel vulnerability in Opera Neon on macOS and Window… | 2026-11-12 |
| CVE-2026-125285 | NA | N/A | Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted C… | 2026-11-12 |
| CVE-2026-125870 | MEDIUM | 4.2 | BookStack before 26.09.3 contains a missing authorization vulnerability in ImageController::checkImagePermissi… | 2026-11-12 |
| CVE-2026-126993 | MEDIUM | 5.3 | A security flaw has been discovered in SiteServer SSCMS up to 7.2.2. Impacted is an unknown function of the fi… | 2026-11-12 |
| CVE-2026-126994 | MEDIUM | 6.3 | A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolve_type_kwargs of the… | 2026-11-12 |
| CVE-2026-127050 | MEDIUM | 6.4 | Backup Migration before 2.1.8 for WordPress contains a path traversal vulnerability in its PclZip restore fall… | 2026-11-12 |
| CVE-2026-127056 | HIGH | 7.5 | PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthe… | 2026-11-12 |
| CVE-2026-19422 | CRITICAL | 9.1 | Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in… | 2026-11-12 |
| CVE-2026-75864 | HIGH | 8.1 | Zohocorp ManageEngine DDI Central versions below 6301 is affected by an improper authorization vulnerability t… | 2026-11-12 |
| CVE-2026-75867 | HIGH | 8.1 | Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability tha… | 2026-11-12 |
| CVE-2026-75868 | HIGH | 8.1 | Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability tha… | 2026-11-12 |
| CVE-2026-75869 | HIGH | 8.8 | Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass and PowerShell co… | 2026-11-12 |
| CVE-2026-107484 | HIGH | 7.3 | An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticat… | 2026-11-12 |
| CVE-2026-114466 | MEDIUM | 4.4 | Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked un… | 2026-11-12 |
| CVE-2026-114467 | LOW | 3.3 | Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures… | 2026-11-12 |
| CVE-2026-114469 | MEDIUM | 4.4 | Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size… | 2026-11-12 |
| CVE-2026-116835 | NA | N/A | In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a us… | 2026-11-12 |
| CVE-2026-120490 | LOW | 3.8 | On Scalable Platforms, an administrator with permissions to edit and install the Access Control Policy and NAT… | 2026-11-12 |