CVE IDSeverityCVSSDescriptionDate
CVE-2026-81422NAN/AThe Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify the site's user-regi…2026-11-09
CVE-2026-109582MEDIUM4.0Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information …2026-11-09
CVE-2026-113437MEDIUM5.3Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the ODM product rocoeyes p…2026-11-09
CVE-2026-120386MEDIUM4.3Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, t…2026-11-09
CVE-2026-124577CRITICAL9.8A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknow…2026-11-09
CVE-2026-124578MEDIUM5.3A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown func…2026-11-09
CVE-2026-124579HIGH7.4A vulnerability was determined in aaPanel BillionMail up to 4.9. Affected by this issue is some unknown functi…2026-11-09
CVE-2026-124580CRITICAL10.0A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This…2026-11-09
CVE-2026-116337NAN/AUncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling functionality of th…2026-11-09
CVE-2026-123870NAN/AThe otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's …2026-11-09
CVE-2026-124581HIGH7.3A vulnerability was determined in itsourcecode Airline Reservation System 1.0. Affected is an unknown function…2026-11-09
CVE-2026-124582MEDIUM4.3A vulnerability was identified in WebTorrent up to 2.8.5/3.0.21. Affected by this vulnerability is the functio…2026-11-09
CVE-2026-124584MEDIUM4.4A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the function extract_gzip of…2026-11-09
CVE-2026-124585CRITICAL9.9A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This…2026-11-09
CVE-2026-92606MEDIUM6.0Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Software Technologies Resear…2026-11-09
CVE-2026-94249HIGH8.1Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allo…2026-11-09
CVE-2026-101031NAN/AThe `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP …2026-11-09
CVE-2026-107474NAN/AThe Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can em…2026-11-09
CVE-2026-111395NAN/AApache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger…2026-11-09
CVE-2026-111403HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Inven…2026-11-09
CVE-2026-111421NAN/AApache Airflow's Task Execution API stored XCom values written by a task without the reserved-key check applie…2026-11-09
CVE-2026-111452NAN/AApache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored un…2026-11-09
CVE-2026-111453NAN/AApache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permission against the `d…2026-11-09
CVE-2026-111454NAN/AApache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produce, or consume an as…2026-11-09
CVE-2026-111455NAN/AApache Airflow's asynchronous connection test checked permissions when the test was queued — only create permi…2026-11-09
CVE-2026-113504NAN/AApache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret regis…2026-11-09
CVE-2026-113508NAN/AApache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during…2026-11-09
CVE-2026-119483HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Fo…2026-11-09
CVE-2026-119497MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Di…2026-11-09
CVE-2026-119503MEDIUM6.5Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Welcart Welcart…2026-11-09
CVE-2026-119504HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiAp…2026-11-09
CVE-2026-119505HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart …2026-11-09
CVE-2026-119514MEDIUM6.3Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privi…2026-11-09
CVE-2026-121760HIGH7.5Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Co…2026-11-09
CVE-2026-121763MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV…2026-11-09
CVE-2026-121764HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVis…2026-11-09
CVE-2026-121780HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gijo Var…2026-11-09
CVE-2026-123463HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham …2026-11-09
CVE-2026-123465HIGH7.5Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycr…2026-11-09
CVE-2026-123484HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblo…2026-11-09
CVE-2026-124586HIGH7.3A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in t…2026-11-09
CVE-2026-124587MEDIUM4.3A vulnerability was identified in elizaOS eliza 2.0.3-beta.7. The affected element is an unknown function of t…2026-11-09
CVE-2026-124588MEDIUM6.3A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the funct…2026-11-09
CVE-2026-124589MEDIUM6.3A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects t…2026-11-09
CVE-2026-124637NAN/AA stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing form, in the parameter…2026-11-09
CVE-2026-40913NAN/AApache Airflow's public Import Errors API returns the raw parse-failure stack trace to any user with the `Impo…2026-11-09
CVE-2026-50204NAN/AApache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column…2026-11-09
CVE-2026-54863HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur …2026-11-09
CVE-2026-66675MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix…2026-11-09
CVE-2026-68982NAN/AApache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) …2026-11-09
←83 / 8516→