| CVE-2026-125882 | NA | N/A | Relative path traversal vulnerability in N-able N-central allows Path Traversal.
This issue affects N-central… | 2026-11-10 |
| CVE-2026-125883 | NA | N/A | Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Pois… | 2026-11-10 |
| CVE-2026-125958 | NA | N/A | Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion.
This… | 2026-11-10 |
| CVE-2026-126085 | MEDIUM | 5.3 | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Activ… | 2026-11-10 |
| CVE-2026-126123 | MEDIUM | 6.5 | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to th… | 2026-11-10 |
| CVE-2026-126129 | NA | N/A | The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, … | 2026-11-10 |
| CVE-2026-126186 | HIGH | 8.8 | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Activ… | 2026-11-10 |
| CVE-2026-28247 | NA | N/A | Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (… | 2026-11-10 |
| CVE-2026-28248 | NA | N/A | Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow … | 2026-11-10 |
| CVE-2026-28249 | NA | N/A | Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypt… | 2026-11-10 |
| CVE-2026-40668 | NA | N/A | Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a maliciou… | 2026-11-10 |
| CVE-2026-40669 | NA | N/A | An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervi… | 2026-11-10 |
| CVE-2026-40670 | NA | N/A | Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Pa… | 2026-11-10 |
| CVE-2026-67175 | MEDIUM | 4.6 | Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to… | 2026-11-10 |
| CVE-2026-67176 | MEDIUM | 5.4 | Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthentica… | 2026-11-10 |
| CVE-2026-67177 | MEDIUM | 5.4 | Chargemap contains a stored cross site scripting vulnerability. A remote, unauthenticated attacker could craft… | 2026-11-10 |
| CVE-2026-77685 | HIGH | 8.3 | The RFCOMM multiplexer control-channel handler in subsys/bluetooth/host/classic/rfcomm.c computed the echo len… | 2026-11-10 |
| CVE-2026-82391 | CRITICAL | 9.1 | The HTTP/2 front-end of the Zephyr HTTP server aliased connection receive state as a scratch output. In subsys… | 2026-11-10 |
| CVE-2026-87042 | MEDIUM | 6.5 | The IEEE 1588 (PTP) port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a… | 2026-11-10 |
| CVE-2026-89324 | CRITICAL | 9.8 | The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and in… | 2026-11-10 |
| CVE-2026-90832 | MEDIUM | 4.3 | bt_hci_le_per_adv_report_common() in subsys/bluetooth/host/scan.c handles the HCI_LE_Periodic_Advertising_Repo… | 2026-11-10 |
| CVE-2026-90833 | HIGH | 7.8 | The simulated EEPROM driver validated access ranges in eeprom_range_is_valid() (drivers/eeprom/eeprom_simulato… | 2026-11-10 |
| CVE-2026-90834 | MEDIUM | 5.5 | The user-mode syscall verifiers for the 16-bit ("wide data") UART API in drivers/serial/uart_handlers.c valida… | 2026-11-10 |
| CVE-2026-91000 | NA | N/A | Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation.
T… | 2026-11-10 |
| CVE-2026-92439 | NA | N/A | The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion is… | 2026-11-10 |
| CVE-2026-92441 | NA | N/A | Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Fo… | 2026-11-10 |
| CVE-2026-92442 | NA | N/A | The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache … | 2026-11-10 |
| CVE-2026-92443 | NA | N/A | The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request c… | 2026-11-10 |
| CVE-2026-92545 | NA | N/A | The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the reque… | 2026-11-10 |
| CVE-2026-92558 | NA | N/A | The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape … | 2026-11-10 |
| CVE-2026-96437 | NA | N/A | The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than t… | 2026-11-10 |
| CVE-2024-36309 | NA | N/A | Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intention… | 2026-11-10 |
| CVE-2025-0008 | NA | N/A | Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU),… | 2026-11-10 |
| CVE-2025-29941 | NA | N/A | Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmwa… | 2026-11-10 |
| CVE-2025-48504 | NA | N/A | Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware coul… | 2026-11-10 |
| CVE-2026-0003 | NA | N/A | Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted V… | 2026-11-10 |
| CVE-2026-0435 | NA | N/A | Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware … | 2026-11-10 |
| CVE-2026-0454 | NA | N/A | An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hyper… | 2026-11-10 |
| CVE-2026-0480 | NA | N/A | Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow… | 2026-11-10 |
| CVE-2026-123084 | MEDIUM | 6.5 | An **expression language injection** has been found in the HeaderContentGuard.permit function in publication.p… | 2026-11-10 |
| CVE-2026-126187 | NA | N/A | React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.… | 2026-11-10 |
| CVE-2026-126261 | CRITICAL | 9.8 | A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, Forti… | 2026-11-10 |
| CVE-2026-20183 | MEDIUM | 4.3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an a… | 2026-11-10 |
| CVE-2026-124499 | MEDIUM | 4.7 | A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This affects the function w… | 2026-11-09 |
| CVE-2026-124500 | MEDIUM | 6.3 | A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the funct… | 2026-11-09 |
| CVE-2026-124501 | HIGH | 7.3 | A weakness has been identified in Tidelift moto up to 5.2.4. Affected is an unknown function of the file moto/… | 2026-11-09 |
| CVE-2026-124502 | MEDIUM | 4.3 | A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by… | 2026-11-09 |
| CVE-2026-119506 | CRITICAL | 9.1 | Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-elem… | 2026-11-09 |
| CVE-2026-124504 | MEDIUM | 6.3 | A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService… | 2026-11-09 |
| CVE-2026-124505 | MEDIUM | 4.3 | A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the f… | 2026-11-09 |