| CVE-2026-76970 | HIGH | 7.5 | Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an un… | 2026-11-10 |
| CVE-2026-76973 | HIGH | 7.5 | Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an una… | 2026-11-10 |
| CVE-2026-89103 | CRITICAL | 10.0 | SAP Gateway activates the default Access Control List with high privileges allowing categorization of external… | 2026-11-10 |
| CVE-2026-89114 | HIGH | 7.5 | SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service request… | 2026-11-10 |
| CVE-2026-89115 | MEDIUM | 4.4 | SAP Start Service and SAP Management Console store sensitive credential information in process memory without … | 2026-11-10 |
| CVE-2026-89119 | CRITICAL | 9.6 | SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform s… | 2026-11-10 |
| CVE-2026-89125 | MEDIUM | 6.0 | Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an … | 2026-11-10 |
| CVE-2026-89126 | CRITICAL | 10.0 | SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An… | 2026-11-10 |
| CVE-2026-89128 | MEDIUM | 5.3 | Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP … | 2026-11-10 |
| CVE-2026-89129 | MEDIUM | 5.8 | Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthen… | 2026-11-10 |
| CVE-2026-89131 | MEDIUM | 4.3 | SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site r… | 2026-11-10 |
| CVE-2026-88707 | NA | N/A | An
out-of-bounds write in certain ASUS Router firmware
allows an unauthenticated nearby user to send an HTTP r… | 2026-11-10 |
| CVE-2026-88708 | NA | N/A | An
off-by-one error in certain ASUS Router firmware
allows
an unauthenticated nearby user to send a packet wit… | 2026-11-10 |
| CVE-2026-88709 | NA | N/A | Improper
neutralization of special elements used in an OS command in certain
ASUS Router firmware allows an us… | 2026-11-10 |
| CVE-2026-88710 | NA | N/A | Improper
neutralization of special elements used in an OS command in certain
ASUS Router firmware
allows an un… | 2026-11-10 |
| CVE-2026-125612 | HIGH | 8.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww … | 2026-11-10 |
| CVE-2026-112125 | HIGH | 7.3 | Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.
This issue affects HA Moni… | 2026-11-10 |
| CVE-2026-115640 | NA | N/A | LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Partici… | 2026-11-10 |
| CVE-2026-115646 | CRITICAL | 9.8 | Partial String Comparison Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 bef… | 2026-11-10 |
| CVE-2026-86578 | HIGH | 7.3 | Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows.
This issue affects Hitachi Dynamic … | 2026-11-10 |
| CVE-2026-86579 | HIGH | 8.2 | Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.
This issue affects Hitachi Dynamic… | 2026-11-10 |
| CVE-2026-91754 | HIGH | 8.1 | Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hita… | 2026-11-10 |
| CVE-2026-91755 | HIGH | 8.1 | Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dynamic… | 2026-11-10 |
| CVE-2026-91756 | HIGH | 8.1 | OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dyn… | 2026-11-10 |
| CVE-2026-91757 | HIGH | 7.1 | OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dyn… | 2026-11-10 |
| CVE-2026-91758 | HIGH | 7.8 | Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hita… | 2026-11-10 |
| CVE-2026-91759 | HIGH | 7.8 | Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dyna… | 2026-11-10 |
| CVE-2026-91760 | HIGH | 7.0 | Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitac… | 2026-11-10 |
| CVE-2026-91761 | HIGH | 8.2 | UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue af… | 2026-11-10 |
| CVE-2026-91762 | HIGH | 7.9 | UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue a… | 2026-11-10 |
| CVE-2026-91763 | HIGH | 8.2 | UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue aff… | 2026-11-10 |
| CVE-2026-91764 | HIGH | 8.1 | Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux.
This is… | 2026-11-10 |
| CVE-2026-92863 | HIGH | 7.0 | Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market).
This issue … | 2026-11-10 |
| CVE-2026-92864 | HIGH | 7.3 | Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and … | 2026-11-10 |
| CVE-2026-96769 | MEDIUM | 5.3 | The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitiv… | 2026-11-10 |
| CVE-2026-104676 | NA | N/A | The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their conte… | 2026-11-10 |
| CVE-2026-110516 | NA | N/A | The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2 does … | 2026-11-10 |
| CVE-2026-119273 | NA | N/A | The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or … | 2026-11-10 |
| CVE-2026-12389 | HIGH | 8.4 | A vulnerability that could lead to a high privileged authenticated user performing a remote code execution att… | 2026-11-10 |
| CVE-2026-12963 | HIGH | 7.4 | A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devi… | 2026-11-10 |
| CVE-2026-12964 | HIGH | 8.0 | A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.… | 2026-11-10 |
| CVE-2026-13312 | CRITICAL | 9.9 | A vulnerability that could allow an attacker to compromise a system.… | 2026-11-10 |
| CVE-2026-13387 | LOW | 3.5 | A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be red… | 2026-11-10 |
| CVE-2026-13409 | MEDIUM | 4.3 | The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw … | 2026-11-10 |
| CVE-2026-14542 | MEDIUM | 6.7 | The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege
… | 2026-11-10 |
| CVE-2026-14543 | LOW | 3.9 | The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, … | 2026-11-10 |
| CVE-2026-14918 | MEDIUM | 5.3 | The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead… | 2026-11-10 |
| CVE-2026-4762 | HIGH | 8.8 | A vulnerability to perform a privilege escalation attack on the server as a non-admin user.… | 2026-11-10 |
| CVE-2026-63282 | MEDIUM | 6.5 | Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, w… | 2026-11-10 |
| CVE-2026-63287 | MEDIUM | 6.5 | It was possible for an authenticated non-admin user to modify certain data objects without having the appropri… | 2026-11-10 |