| CVE-2026-90591 | HIGH | 7.5 | The NXP ENET-QOS Ethernet driver's receive work handler eth_nxp_enet_qos_rx() in drivers/ethernet/eth_nxp_enet… | 2026-11-09 |
| CVE-2026-115934 | CRITICAL | 9.8 | An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a se… | 2026-11-09 |
| CVE-2026-124034 | MEDIUM | 6.4 | Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might … | 2026-11-09 |
| CVE-2026-124035 | HIGH | 7.1 | Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow… | 2026-11-09 |
| CVE-2026-125074 | HIGH | 7.3 | A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unkn… | 2026-11-09 |
| CVE-2026-125075 | HIGH | 7.3 | A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This impact… | 2026-11-09 |
| CVE-2026-125113 | MEDIUM | 5.3 | The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts… | 2026-11-09 |
| CVE-2026-125114 | NA | N/A | Novu provides an API for sending notifications through multiple channels. Prior to 3.15.0, the conditions filt… | 2026-11-09 |
| CVE-2026-125115 | MEDIUM | 6.8 | Novu provides an API for sending notifications through multiple channels. Prior to 3.17.0, validateUrlSsrf in … | 2026-11-09 |
| CVE-2026-125116 | MEDIUM | 4.8 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, … | 2026-11-09 |
| CVE-2026-125117 | HIGH | 8.2 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, … | 2026-11-09 |
| CVE-2026-125118 | MEDIUM | 6.5 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, … | 2026-11-09 |
| CVE-2026-125119 | HIGH | 7.5 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. From 6.0.0 until 6… | 2026-11-09 |
| CVE-2026-125120 | CRITICAL | 9.8 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, … | 2026-11-09 |
| CVE-2026-123493 | MEDIUM | 5.4 | Vikunja from 2.4.0 before 2.7.1 contains an authentication bypass vulnerability that allows disabled or locked… | 2026-11-08 |
| CVE-2026-123494 | LOW | 3.5 | Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows attackers to import their… | 2026-11-08 |
| CVE-2026-123495 | MEDIUM | 4.6 | Vikunja 2.0.0 before 2.7.1 accepts form-encoded bodies on the /api/v2 login and OIDC callback endpoints withou… | 2026-11-08 |
| CVE-2026-123496 | LOW | 3.3 | Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init… | 2026-11-08 |
| CVE-2026-123497 | MEDIUM | 6.8 | Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path… | 2026-11-08 |
| CVE-2026-123498 | LOW | 3.7 | Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write ac… | 2026-11-08 |
| CVE-2026-123499 | MEDIUM | 5.9 | Vikunja veans before 2.7.1 contains a credential exposure vulnerability that allows malicious repository autho… | 2026-11-08 |
| CVE-2026-123500 | MEDIUM | 6.2 | Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump … | 2026-11-08 |
| CVE-2026-123501 | MEDIUM | 6.5 | Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated use… | 2026-11-08 |
| CVE-2026-123502 | MEDIUM | 5.2 | Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-sha… | 2026-11-08 |
| CVE-2026-123503 | MEDIUM | 5.4 | Vikunja before 2.7.1 contains an improper authorization vulnerability in canDoBucket that allows users with pr… | 2026-11-08 |
| CVE-2026-123504 | MEDIUM | 4.3 | Vikunja from 0.22.0 before 2.7.1 contains an information disclosure vulnerability that allows read-only projec… | 2026-11-08 |
| CVE-2026-123505 | MEDIUM | 5.5 | Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read store… | 2026-11-08 |
| CVE-2026-123506 | MEDIUM | 5.4 | Vikunja from 2.2.0 before 2.7.1 contains an authorization bypass vulnerability that allows holders of tokens s… | 2026-11-08 |
| CVE-2026-123507 | LOW | 2.7 | Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins t… | 2026-11-08 |
| CVE-2026-123508 | LOW | 3.1 | Vikunja before 2.7.1 contains a supply chain vulnerability in its mage release targets that fetch the xgo modu… | 2026-11-08 |
| CVE-2026-123509 | MEDIUM | 4.3 | Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows project writers o… | 2026-11-08 |
| CVE-2026-123510 | LOW | 3.3 | Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load f… | 2026-11-08 |
| CVE-2026-123511 | MEDIUM | 4.3 | Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated Cal… | 2026-11-08 |
| CVE-2026-123512 | MEDIUM | 6.1 | Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL que… | 2026-11-08 |
| CVE-2026-123513 | MEDIUM | 6.8 | Vikunja before 2.7.1 contains a credential exposure vulnerability that allows attackers to steal stored auth t… | 2026-11-08 |
| CVE-2026-123514 | MEDIUM | 4.3 | Vikunja before 2.7.1 contains an improper resource cleanup vulnerability that leaves full-data export archives… | 2026-11-08 |
| CVE-2026-123515 | MEDIUM | 4.1 | Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access … | 2026-11-08 |
| CVE-2026-123516 | MEDIUM | 4.3 | Vikunja before 2.7.1 contains a resource exhaustion vulnerability in the vikunja-file ZIP importer that allows… | 2026-11-08 |
| CVE-2026-123517 | MEDIUM | 4.3 | Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to deter… | 2026-11-08 |
| CVE-2026-123518 | MEDIUM | 4.3 | Vikunja before 2.7.1 contains an incorrect authorization vulnerability in TaskBucket.CanUpdate, which checks w… | 2026-11-08 |
| CVE-2026-123519 | MEDIUM | 6.5 | Vikunja before 2.7.1 contains a denial of service vulnerability that allows authenticated users to exhaust API… | 2026-11-08 |
| CVE-2026-123520 | HIGH | 7.1 | Vikunja from 0.18.0 before 2.7.1 contains a privilege escalation vulnerability that allows team owners to gain… | 2026-11-08 |
| CVE-2026-123521 | MEDIUM | 5.9 | Vikunja before 2.7.1 contains an improper restriction of excessive authentication attempts vulnerability that … | 2026-11-08 |
| CVE-2026-123522 | HIGH | 7.1 | Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read an… | 2026-11-08 |
| CVE-2026-123523 | MEDIUM | 6.5 | Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated use… | 2026-11-08 |
| CVE-2026-123524 | MEDIUM | 5.7 | Vikunja from 0.23.0 before 2.7.1 contains an information disclosure vulnerability that allows project collabor… | 2026-11-08 |
| CVE-2026-123525 | MEDIUM | 6.5 | Vikunja before 2.7.1 allocates memory without limits in its Trello, Todoist and Microsoft To Do migration impo… | 2026-11-08 |
| CVE-2026-123526 | MEDIUM | 5.4 | Vikunja before 2.7.1 contains a mass assignment vulnerability that allows any authenticated user to set the re… | 2026-11-08 |
| CVE-2026-123527 | MEDIUM | 5.4 | Vikunja from 2.4.0 before 2.7.1 contains an authorization bypass vulnerability that allows token holders to pe… | 2026-11-08 |
| CVE-2026-123528 | MEDIUM | 6.8 | Vikunja before 2.7.1 contains an insufficient session expiration vulnerability that allows holders of revoked … | 2026-11-08 |