| CVE-2025-54507 | NA | N/A | Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could al… | 2026-11-12 |
| CVE-2026-0455 | NA | N/A | The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buf… | 2026-11-12 |
| CVE-2026-0460 | NA | N/A | Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a … | 2026-11-12 |
| CVE-2026-107152 | HIGH | 7.1 | An improper authentication vulnerability has been found in the task console in the smart_proxy_dynflow package… | 2026-11-12 |
| CVE-2026-107360 | CRITICAL | 9.6 | A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without … | 2026-11-12 |
| CVE-2026-107443 | HIGH | 7.7 | A flaw was found in Foreman. An authenticated user with view_hosts privileges can retrieve rendered provisioni… | 2026-11-12 |
| CVE-2026-111456 | HIGH | 7.1 | A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registratio… | 2026-11-12 |
| CVE-2026-124002 | CRITICAL | 9.8 | XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability … | 2026-11-12 |
| CVE-2026-124003 | HIGH | 7.8 | XWEB EVO before 5.6.2 contains a command injection vulnerability where the setuid-root Lua CGI interpreter wlu… | 2026-11-12 |
| CVE-2026-124004 | CRITICAL | 9.8 | XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote … | 2026-11-12 |
| CVE-2026-124005 | HIGH | 8.1 | XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to… | 2026-11-12 |
| CVE-2026-124006 | HIGH | 8.1 | XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to der… | 2026-11-12 |
| CVE-2026-124007 | HIGH | 8.1 | XWEB EVO before 5.6.2 contains a pre-authentication OS command injection vulnerability that allows unauthentic… | 2026-11-12 |
| CVE-2026-124008 | HIGH | 7.2 | XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability in the devices.lua t… | 2026-11-12 |
| CVE-2026-124009 | HIGH | 7.2 | XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenti… | 2026-11-12 |
| CVE-2026-124010 | CRITICAL | 9.8 | XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers … | 2026-11-12 |
| CVE-2026-124011 | MEDIUM | 5.3 | XWEB EVO 5.6.2 through 5.8.8 contains an information disclosure vulnerability that allows unauthenticated atta… | 2026-11-12 |
| CVE-2026-124012 | HIGH | 8.1 | XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account… | 2026-11-12 |
| CVE-2026-124013 | HIGH | 8.8 | XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua impor… | 2026-11-12 |
| CVE-2026-124014 | CRITICAL | 9.1 | XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote… | 2026-11-12 |
| CVE-2026-124015 | MEDIUM | 5.9 | XWEB EVO 5.6.2 through 5.8.8 contains an authentication bypass vulnerability that allows unauthenticated attac… | 2026-11-12 |
| CVE-2026-127120 | MEDIUM | 4.3 | A vulnerability was found in Governikus AusweisApp Mobile up to 2.5.5. This impacts an unknown function of the… | 2026-11-12 |
| CVE-2026-45265 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-45341 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to bef… | 2026-11-12 |
| CVE-2026-46674 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-46676 | MEDIUM | 5.3 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to bef… | 2026-11-12 |
| CVE-2026-46677 | MEDIUM | 6.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-47217 | HIGH | 7.5 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 an… | 2026-11-12 |
| CVE-2026-47257 | HIGH | 8.1 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.… | 2026-11-12 |
| CVE-2026-47258 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-47259 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-47710 | HIGH | 8.2 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-47711 | HIGH | 8.6 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1… | 2026-11-12 |
| CVE-2026-52786 | HIGH | 7.1 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1… | 2026-11-12 |
| CVE-2026-68548 | CRITICAL | 9.4 | Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authori… | 2026-11-12 |
| CVE-2026-106018 | NA | N/A | Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Au… | 2026-11-12 |
| CVE-2026-126205 | MEDIUM | 5.3 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126206 | NA | N/A | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126207 | MEDIUM | 4.7 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126208 | MEDIUM | 4.7 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126209 | NA | N/A | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o… | 2026-11-12 |
| CVE-2026-126793 | HIGH | 8.0 | An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from rele… | 2026-11-12 |
| CVE-2026-127206 | MEDIUM | 5.3 | Image CAPTCHA for Contact Form 7 and WPForms through 3.3.29 contains a CAPTCHA bypass vulnerability that allow… | 2026-11-12 |
| CVE-2026-127207 | MEDIUM | 5.4 | Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authentica… | 2026-11-12 |
| CVE-2026-127208 | HIGH | 8.8 | datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achiev… | 2026-11-12 |
| CVE-2026-86322 | HIGH | 8.8 | A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#fi… | 2026-11-12 |
| CVE-2026-86323 | MEDIUM | 4.3 | A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specifi… | 2026-11-12 |
| CVE-2026-86324 | MEDIUM | 4.3 | A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through Foreman::C… | 2026-11-12 |
| CVE-2026-126210 | MEDIUM | 5.3 | @hono/node-server allows running the Hono application on Node.js. Prior to 1.19.18 and from 2.0.0 until 2.1.6,… | 2026-11-12 |
| CVE-2026-126343 | MEDIUM | 5.3 | @hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.1.6, the WebSocket upgrad… | 2026-11-12 |