| CVE-2026-110469 | NA | N/A | WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-cont… | 2026-11-09 |
| CVE-2026-112168 | NA | N/A | The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the … | 2026-11-09 |
| CVE-2026-112169 | NA | N/A | Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creat… | 2026-11-09 |
| CVE-2026-112170 | NA | N/A | The software downloads upgrade files without performing integrity checks, allowing the installation of tampere… | 2026-11-09 |
| CVE-2026-112171 | NA | N/A | An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to… | 2026-11-09 |
| CVE-2026-112204 | NA | N/A | WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, w… | 2026-11-09 |
| CVE-2026-112205 | NA | N/A | WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockou… | 2026-11-09 |
| CVE-2026-118790 | NA | N/A | Multiple hardcoded credentials are embedded within product components and administrative functionalities. Thes… | 2026-11-09 |
| CVE-2026-118791 | NA | N/A | The application implements software update functionality without adequate authenticity and integrity validatio… | 2026-11-09 |
| CVE-2026-118792 | NA | N/A | Default credentials permit access through AcuXDBC.… | 2026-11-09 |
| CVE-2026-118795 | NA | N/A | Administrative roles and module permissions are stored in mutable local database fields, allowing privilege es… | 2026-11-09 |
| CVE-2026-118798 | NA | N/A | Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and… | 2026-11-09 |
| CVE-2026-119610 | HIGH | 8.2 | A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element. When proc… | 2026-11-09 |
| CVE-2026-119613 | NA | N/A | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a call… | 2026-11-09 |
| CVE-2026-120854 | HIGH | 7.5 | Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solut… | 2026-11-09 |
| CVE-2026-120856 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rymera W… | 2026-11-09 |
| CVE-2026-121601 | MEDIUM | 6.1 | A flaw was found in GStreamer's MXF demuxer plugin (gst-plugins-bad). When processing a specially crafted MXF … | 2026-11-09 |
| CVE-2026-121611 | MEDIUM | 6.5 | A flaw was found in GStreamer's gst-plugins-bad package. A use of uninitialized memory vulnerability exists in… | 2026-11-09 |
| CVE-2026-122673 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Sh… | 2026-11-09 |
| CVE-2026-124079 | CRITICAL | 9.8 | rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vuln… | 2026-11-09 |
| CVE-2026-124622 | MEDIUM | 5.3 | A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3. This impacts the function TrigramIndex::open… | 2026-11-09 |
| CVE-2026-124623 | MEDIUM | 4.7 | A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the … | 2026-11-09 |
| CVE-2026-94434 | HIGH | 8.8 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜ… | 2026-11-09 |
| CVE-2026-95648 | HIGH | 8.1 | Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc. C-… | 2026-11-09 |
| CVE-2026-119274 | MEDIUM | 4.8 | Stored XSS attacks occur when an attacker injects a malicious script in Global Smart Folders feature in NIOS… | 2026-11-09 |
| CVE-2026-119743 | MEDIUM | 4.8 | pdfmake before 0.3.14 contains a shared resource caching vulnerability that allows attackers to access cross-d… | 2026-11-09 |
| CVE-2026-121841 | NA | N/A | Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.… | 2026-11-09 |
| CVE-2026-121842 | NA | N/A | Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox … | 2026-11-09 |
| CVE-2026-121843 | NA | N/A | Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.… | 2026-11-09 |
| CVE-2026-124624 | MEDIUM | 5.3 | A weakness has been identified in PipraPay 3.0.0. Affected by this vulnerability is the function hash_hmac of … | 2026-11-09 |
| CVE-2026-124625 | MEDIUM | 6.3 | A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteDat… | 2026-11-09 |
| CVE-2026-124635 | MEDIUM | 4.7 | A vulnerability was identified in kevquirk PureBlog up to 3.7.2. Impacted is an unknown function of the file a… | 2026-11-09 |
| CVE-2026-16283 | HIGH | 8.8 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Os… | 2026-11-09 |
| CVE-2026-95778 | HIGH | 8.8 | A remote code execution vulnerability exists in HPE Morpheus Software.… | 2026-11-09 |
| CVE-2026-95779 | HIGH | 8.8 | An exposure of the appliance’s confidential certificate information
vulnerability exists in HPE Morpheus man… | 2026-11-09 |
| CVE-2026-104620 | NA | N/A | A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used … | 2026-11-09 |
| CVE-2026-119474 | HIGH | 7.8 | Incorrect Permission Assignment for Critical Resource vulnerability in HAVELSAN Inc. Liman Render Engine allow… | 2026-11-09 |
| CVE-2026-124249 | NA | N/A | http.cookiejar.CookieJar deleted a stored cookie when a response carried an
already expired Set-Cookie header … | 2026-11-09 |
| CVE-2026-124636 | LOW | 3.8 | A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element is the function sav… | 2026-11-09 |
| CVE-2026-124850 | NA | N/A | A SQL injection vulnerability exists in a database migration script in flowintel.
The migration process reads… | 2026-11-09 |
| CVE-2026-124916 | MEDIUM | 5.4 | PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mod… | 2026-11-09 |
| CVE-2026-124959 | NA | N/A | The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a seria… | 2026-11-09 |
| CVE-2026-19552 | NA | N/A | When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate… | 2026-11-09 |
| CVE-2025-10248 | NA | N/A | XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload … | 2026-11-09 |
| CVE-2026-118492 | NA | N/A | In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messa… | 2026-11-09 |
| CVE-2026-103906 | NA | N/A | Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to conne… | 2026-11-09 |
| CVE-2026-104989 | NA | N/A | Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 all… | 2026-11-09 |
| CVE-2026-112164 | NA | N/A | The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV… | 2026-11-09 |
| CVE-2026-112165 | NA | N/A | The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("no… | 2026-11-09 |
| CVE-2026-114594 | NA | N/A | A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, auth… | 2026-11-09 |