| CVE-2026-97874 | NA | N/A | When Hessian remoting is configured with BASIC authentication, the authentication check is not applied to Hess… | 2026-11-10 |
| CVE-2026-97880 | NA | N/A | The embedded OpenEJB HTTP server dispatches some requests to REST endpoints configured for HTTP Basic authenti… | 2026-11-10 |
| CVE-2026-97881 | NA | N/A | The embedded OpenEJB HTTP server does not restrict static resource paths to the configured resource directorie… | 2026-11-10 |
| CVE-2026-97888 | NA | N/A | The embedded HTTP server does not clear the security identity established during a request before its worker t… | 2026-11-10 |
| CVE-2026-97890 | NA | N/A | The embedded HTTP server does not invalidate the previous session identifier when an application changes the s… | 2026-11-10 |
| CVE-2026-102803 | NA | N/A | Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2… | 2026-11-10 |
| CVE-2026-107405 | MEDIUM | 5.5 | An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local … | 2026-11-10 |
| CVE-2026-111729 | NA | N/A | In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a c… | 2026-11-10 |
| CVE-2026-112185 | NA | N/A | In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configurati… | 2026-11-10 |
| CVE-2026-112186 | NA | N/A | In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every requ… | 2026-11-10 |
| CVE-2026-115791 | NA | N/A | When tarfile or zipfile command line interface (CLI) is used to
decompress an archive, a Python script shadow… | 2026-11-10 |
| CVE-2026-123178 | MEDIUM | 4.5 | An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticate… | 2026-11-10 |
| CVE-2026-123180 | HIGH | 8.8 | A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker wh… | 2026-11-10 |
| CVE-2026-124251 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allo… | 2026-11-10 |
| CVE-2026-125121 | NA | N/A | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment… | 2026-11-10 |
| CVE-2026-125122 | NA | N/A | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment… | 2026-11-10 |
| CVE-2026-125123 | NA | N/A | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment… | 2026-11-10 |
| CVE-2026-125124 | NA | N/A | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment… | 2026-11-10 |
| CVE-2026-125125 | NA | N/A | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment… | 2026-11-10 |
| CVE-2026-125271 | HIGH | 7.8 | Incorrect normalization of operation names in the custom security policy enforcement in awslabs aws-api-mcp-se… | 2026-11-10 |
| CVE-2026-126042 | HIGH | 7.0 | VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variable… | 2026-11-10 |
| CVE-2026-126048 | MEDIUM | 4.6 | Gwenhywfar 4.99.8beta before 5.14.2 contains a stack-based buffer overflow in GWEN_TLV_Buffer_To_DB() in src/p… | 2026-11-10 |
| CVE-2026-126049 | MEDIUM | 4.6 | Gwenhywfar 5.14.2 contains a heap use-after-free vulnerability in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c,… | 2026-11-10 |
| CVE-2026-126050 | HIGH | 7.8 | apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows at… | 2026-11-10 |
| CVE-2026-20756 | NA | N/A | Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applic… | 2026-11-10 |
| CVE-2026-20798 | NA | N/A | Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Application… | 2026-11-10 |
| CVE-2026-20880 | NA | N/A | Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applic… | 2026-11-10 |
| CVE-2026-21407 | NA | N/A | Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of… | 2026-11-10 |
| CVE-2026-26052 | NA | N/A | Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Appli… | 2026-11-10 |
| CVE-2026-28702 | NA | N/A | Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications ma… | 2026-11-10 |
| CVE-2026-28743 | NA | N/A | Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device… | 2026-11-10 |
| CVE-2026-28765 | NA | N/A | Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: … | 2026-11-10 |
| CVE-2026-32667 | NA | N/A | Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an es… | 2026-11-10 |
| CVE-2026-32670 | NA | N/A | Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Dr… | 2026-11-10 |
| CVE-2026-32672 | NA | N/A | Null pointer dereference for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drive… | 2026-11-10 |
| CVE-2026-33089 | NA | N/A | Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial … | 2026-11-10 |
| CVE-2026-33270 | NA | N/A | Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a den… | 2026-11-10 |
| CVE-2026-33279 | NA | N/A | Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device… | 2026-11-10 |
| CVE-2026-33563 | NA | N/A | Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (I… | 2026-11-10 |
| CVE-2026-33567 | NA | N/A | Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may al… | 2026-11-10 |
| CVE-2026-33571 | NA | N/A | Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device … | 2026-11-10 |
| CVE-2026-34016 | NA | N/A | Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 … | 2026-11-10 |
| CVE-2026-35060 | NA | N/A | Missing authentication for critical function for some AI Playground software before version v3.1.1-beta within… | 2026-11-10 |
| CVE-2026-35683 | NA | N/A | Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow… | 2026-11-10 |
| CVE-2026-39456 | NA | N/A | Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User … | 2026-11-10 |
| CVE-2026-40065 | NA | N/A | Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User… | 2026-11-10 |
| CVE-2026-40426 | NA | N/A | Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring … | 2026-11-10 |
| CVE-2026-40427 | NA | N/A | Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications ma… | 2026-11-10 |
| CVE-2026-40693 | NA | N/A | Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications… | 2026-11-10 |
| CVE-2026-40704 | NA | N/A | Protection mechanism failure for some Intel Neural Compressor software before version master within Ring 3: Us… | 2026-11-10 |