CVE IDSeverityCVSSDescriptionDate
CVE-2026-115336MEDIUM6.5Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allo…2026-11-09
CVE-2026-115337MEDIUM6.3Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user…2026-11-09
CVE-2026-115338HIGH8.1Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a n…2026-11-09
CVE-2026-115339HIGH7.5Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could al…2026-11-09
CVE-2026-115340HIGH7.1Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and …2026-11-09
CVE-2026-115341HIGH7.7Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server vers…2026-11-09
CVE-2026-121576HIGH8.8Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-…2026-11-09
CVE-2026-121612MEDIUM4.3Weak Authentication vulnerability in WPZOOM WPBruiser {no- Captcha anti-Spam} goodbye-captcha allows Authentic…2026-11-09
CVE-2026-121685NAN/AFrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credent…2026-11-09
CVE-2026-121686NAN/AFrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote cod…2026-11-09
CVE-2026-121687NAN/AFrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are e…2026-11-09
CVE-2026-121688NAN/AFrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update m…2026-11-09
CVE-2026-121689NAN/AFrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple inse…2026-11-09
CVE-2026-121690NAN/AFrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. A…2026-11-09
CVE-2026-122664HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhi…2026-11-09
CVE-2026-123364NAN/AOctoPrint provides a web interface for controlling consumer 3D printers. From 2.0.0rc1 until 2.0.0rc7, an auth…2026-11-09
CVE-2026-123482HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblo…2026-11-09
CVE-2026-124683NAN/AEclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in …2026-11-09
CVE-2026-119755HIGH7.5Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allo…2026-11-09
CVE-2026-119756CRITICAL9.8Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendRece…2026-11-09
CVE-2026-123270CRITICAL9.8Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenti…2026-11-09
CVE-2026-123367HIGH7.4Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd J…2026-11-09
CVE-2026-123368NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123369NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123370NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123371NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123372NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123373NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123796NAN/Acompose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment…2026-11-09
CVE-2026-123797HIGH7.5SuperTokens Core is an open source authentication server. Prior to 11.3.6, 11.4.6, and 12.0.8, app-specific ma…2026-11-09
CVE-2026-125063MEDIUM4.3A flaw was found in the rrule validation of schedules in automation controller. Several non-anchored regular e…2026-11-09
CVE-2026-19706HIGH8.3During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity v…2026-11-09
CVE-2026-60117MEDIUM6.2The Android implementation of the Flutter/Dart receive_sharing_intent package, versions 1.4.1 through 1.9.0, c…2026-11-09
CVE-2026-84503MEDIUM6.7A flaw was found in ansible-core's ansible.builtin.git module. The module invokes git (ls-remote, clone, fetch…2026-11-09
CVE-2026-112314HIGH7.5clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between…2026-11-09
CVE-2026-112315MEDIUM5.3The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do…2026-11-09
CVE-2026-112316MEDIUM6.5xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded da…2026-11-09
CVE-2026-112317MEDIUM5.3krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypte…2026-11-09
CVE-2026-112318MEDIUM6.5The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not rejec…2026-11-09
CVE-2026-112319MEDIUM6.5The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows …2026-11-09
CVE-2026-112320HIGH7.5The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentic…2026-11-09
CVE-2026-112321HIGH7.5The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded argume…2026-11-09
CVE-2026-112322HIGH7.5clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of th…2026-11-09
CVE-2026-112323HIGH7.5The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remot…2026-11-09
CVE-2026-119079HIGH7.5decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the dec…2026-11-09
CVE-2026-120834HIGH7.3Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issu…2026-11-09
CVE-2026-121573MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapres…2026-11-09
CVE-2026-121769HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.co…2026-11-09
CVE-2026-123798HIGH8.1SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.7, 11.4.7, and 12.0.10, SAML.…2026-11-09
CVE-2026-123799HIGH7.4SuperTokens Core is an open source authentication server. From 11.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11…2026-11-09
←86 / 8516→