| CVE-2026-125652 |
Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point |
10.11.2026 |
|
| CVE-2026-100386 |
Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parser |
10.11.2026 |
7.5 |
| CVE-2026-120513 |
Everest Forms <= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest_forms_{form_id}_old_{field_id}' Parameter |
10.11.2026 |
8.2 |
| CVE-2026-76877 |
WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' Parameter |
10.11.2026 |
8.1 |
| CVE-2026-84938 |
Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook |
10.11.2026 |
7.2 |
| CVE-2026-93427 |
ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom Field |
10.11.2026 |
7.2 |
| CVE-2026-104676 |
Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG Upload |
10.11.2026 |
|
| CVE-2026-110516 |
All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute |
10.11.2026 |
|
| CVE-2026-119273 |
BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security Log |
10.11.2026 |
|
| CVE-2026-63287 |
|
10.11.2026 |
6.5 |
| CVE-2026-13312 |
|
10.11.2026 |
9.9 |
| CVE-2026-13387 |
|
10.11.2026 |
3.5 |
| CVE-2026-12389 |
|
10.11.2026 |
8.4 |
| CVE-2026-12963 |
|
10.11.2026 |
7.4 |
| CVE-2026-12964 |
|
10.11.2026 |
8 |
| CVE-2026-4762 |
|
10.11.2026 |
8.8 |
| CVE-2026-63288 |
|
10.11.2026 |
8.3 |
| CVE-2026-8372 |
|
10.11.2026 |
8.8 |
| CVE-2026-14918 |
|
10.11.2026 |
5.3 |
| CVE-2026-14542 |
|
10.11.2026 |
6.7 |
| CVE-2026-14543 |
|
10.11.2026 |
3.9 |
| CVE-2026-63282 |
|
10.11.2026 |
6.5 |
| CVE-2026-13409 |
|
10.11.2026 |
4.3 |
| CVE-2026-9063 |
|
10.11.2026 |
6.7 |
| CVE-2026-112125 |
Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor |
10.11.2026 |
7.3 |
| CVE-2026-115646 |
Partial String Comparison Vulnerability in HiRDB |
10.11.2026 |
9.8 |
| CVE-2026-86578 |
Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows |
10.11.2026 |
7.3 |
| CVE-2026-86579 |
Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows |
10.11.2026 |
8.2 |
| CVE-2026-91754 |
Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware |
10.11.2026 |
8.1 |
| CVE-2026-91755 |
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware |
10.11.2026 |
8.1 |
| CVE-2026-91756 |
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware |
10.11.2026 |
8.1 |
| CVE-2026-91757 |
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware |
10.11.2026 |
7.1 |
| CVE-2026-91758 |
Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
7.8 |
| CVE-2026-91759 |
Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
7.8 |
| CVE-2026-91760 |
Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
7 |
| CVE-2026-91761 |
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
8.2 |
| CVE-2026-91762 |
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
7.9 |
| CVE-2026-91763 |
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
8.2 |
| CVE-2026-91764 |
Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux |
10.11.2026 |
8.1 |
| CVE-2026-92863 |
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market) |
10.11.2026 |
7 |
| CVE-2026-92864 |
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market) |
10.11.2026 |
7.3 |
| CVE-2026-96769 |
Extend B2B - Companies and Users Management for WooCommerce <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint |
10.11.2026 |
5.3 |
| CVE-2026-115640 |
LimeSurvey Community Edition 7.7.0 - Stored XSS in Central Participants blocklist control |
10.11.2026 |
|
| CVE-2026-125612 |
DIAEnergie - SQL Injection Vulnerability |
10.11.2026 |
8.8 |
| CVE-2026-88707 |
|
10.11.2026 |
|
| CVE-2026-88708 |
|
10.11.2026 |
|
| CVE-2026-88709 |
|
10.11.2026 |
|
| CVE-2026-88710 |
|
10.11.2026 |
|
| CVE-2026-109797 |
Cross-tenant sandbox takeover in SAP/astonish |
10.11.2026 |
7.1 |
| CVE-2026-109799 |
Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip)) |
10.11.2026 |
7.5 |
| CVE-2026-125087 |
Michael-A-Kuykendall Shimmy Inference API server.rs missing authentication |
10.11.2026 |
|
| CVE-2026-123424 |
|
10.11.2026 |
|
| CVE-2026-123425 |
|
10.11.2026 |
|
| CVE-2026-123426 |
|
10.11.2026 |
|
| CVE-2026-123427 |
|
10.11.2026 |
|
| CVE-2026-123429 |
|
10.11.2026 |
|
| CVE-2026-123430 |
|
10.11.2026 |
|
| CVE-2026-123431 |
|
10.11.2026 |
|
| CVE-2026-123432 |
|
10.11.2026 |
|
| CVE-2026-123435 |
|
10.11.2026 |
|
| CVE-2026-123437 |
|
10.11.2026 |
|
| CVE-2026-123438 |
|
10.11.2026 |
|
| CVE-2026-123439 |
|
10.11.2026 |
|
| CVE-2026-109805 |
Weak Cryptography in SAP NetWeaver and ABAP Platform (Application Server ABAP) |
10.11.2026 |
6.4 |
| CVE-2026-109793 |
Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher |
10.11.2026 |
7.5 |
| CVE-2026-109794 |
Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher |
10.11.2026 |
7.5 |
| CVE-2026-109795 |
Missing authorization check in S4CRM |
10.11.2026 |
9.9 |
| CVE-2026-109796 |
Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform |
10.11.2026 |
4.3 |
| CVE-2026-109798 |
XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) |
10.11.2026 |
9.1 |
| CVE-2026-109800 |
Memory Corruption vulnerability in SAP Web Dispatcher |
10.11.2026 |
7.7 |
| CVE-2026-109801 |
Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit) |
10.11.2026 |
6.5 |
| CVE-2026-109802 |
Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP |
10.11.2026 |
6.5 |
| CVE-2026-109803 |
Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) |
10.11.2026 |
9.9 |
| CVE-2026-109804 |
Information Disclosure in SAP NetWeaver (SAP Message Server) |
10.11.2026 |
7.5 |
| CVE-2026-109806 |
Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) |
10.11.2026 |
7.5 |
| CVE-2026-109807 |
Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) |
10.11.2026 |
7.5 |
| CVE-2026-109808 |
Missing Authorisation Check in SAP Solution Tools Plug-In (ST-PI) |
10.11.2026 |
3.1 |
| CVE-2026-109809 |
Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit) |
10.11.2026 |
6.5 |
| CVE-2026-109810 |
CSS Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) |
10.11.2026 |
6.1 |
| CVE-2026-109811 |
Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) |
10.11.2026 |
6.5 |
| CVE-2026-120008 |
Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service) |
10.11.2026 |
8.2 |
| CVE-2026-120009 |
Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview) |
10.11.2026 |
7.2 |
| CVE-2026-120010 |
Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server) |
10.11.2026 |
7.5 |
| CVE-2026-120014 |
Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager |
10.11.2026 |
7.6 |
| CVE-2026-120015 |
Insufficient Input Validation in SAP Host Agent |
10.11.2026 |
7.5 |
| CVE-2026-120016 |
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual Composer |
10.11.2026 |
6.1 |
| CVE-2026-120017 |
Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) |
10.11.2026 |
10 |
| CVE-2026-125086 |
D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials |
10.11.2026 |
|
| CVE-2026-89125 |
Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager |
10.11.2026 |
6 |
| CVE-2026-89126 |
Memory Corruption vulnerability in SAP Web Dispatcher |
10.11.2026 |
10 |
| CVE-2026-89128 |
Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool) |
10.11.2026 |
5.3 |
| CVE-2026-89129 |
Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services) |
10.11.2026 |
5.8 |
| CVE-2026-89131 |
Cross Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Enterprise Portal |
10.11.2026 |
4.3 |
| CVE-2026-107240 |
|
10.11.2026 |
|
| CVE-2026-107241 |
|
10.11.2026 |
|
| CVE-2026-107242 |
|
10.11.2026 |
|
| CVE-2026-107243 |
|
10.11.2026 |
|
| CVE-2026-107244 |
|
10.11.2026 |
|
| CVE-2026-107245 |
|
10.11.2026 |
|
| CVE-2026-107246 |
|
10.11.2026 |
|
| CVE-2026-124598 |
Hardcoded API Key Discovered in GV-Face Android Application v2.2.1 |
10.11.2026 |
7.5 |
| CVE-2026-124599 |
Hardcoded RSA Private Key and Public Key Exposure in GV-Face Android Application v2.2.1 |
10.11.2026 |
6.2 |
| CVE-2026-124600 |
Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1 |
10.11.2026 |
|
| CVE-2026-124601 |
Hardcoded API Key Discovered in GV-Access Android Application v1.6.1 |
10.11.2026 |
6.2 |
| CVE-2026-124602 |
Hardcoded RSA Private Key and Public Key Exposure in GV-Access Android Application v1.6.1 |
10.11.2026 |
6.2 |
| CVE-2026-124603 |
Hardcoded API Key Discovered in GV-Cloud Android Application v1.5.1 |
10.11.2026 |
6.2 |
| CVE-2026-124604 |
Hardcoded RSA Private Key and Public Key Exposure in GV-Cloud Android Application v1.5.1 |
10.11.2026 |
6.2 |
| CVE-2026-125079 |
D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials |
10.11.2026 |
|
| CVE-2026-125082 |
sunkaifei FlyCMS Content Rendering detail.html ModelDataService.insertData cross site scripting |
10.11.2026 |
|
| CVE-2026-76964 |
Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) |
10.11.2026 |
10 |
| CVE-2026-76965 |
OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform |
10.11.2026 |
9.9 |
| CVE-2026-76966 |
Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform |
10.11.2026 |
8.9 |
| CVE-2026-76970 |
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform |
10.11.2026 |
7.5 |
| CVE-2026-76973 |
Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (SAP Message Server) |
10.11.2026 |
7.5 |
| CVE-2026-89103 |
Broken Access Control in SAP Gateway |
10.11.2026 |
10 |
| CVE-2026-89114 |
Missing Authentication check in SAP NetWeaver AS Java EDM Application |
10.11.2026 |
7.5 |
| CVE-2026-89115 |
Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management Console |
10.11.2026 |
4.4 |
| CVE-2026-89119 |
Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager |
10.11.2026 |
9.6 |
| CVE-2026-125078 |
SourceCodester Smart Attendance System with QR Code Scanner login.php session fixiation |
10.11.2026 |
|
| CVE-2026-125077 |
SourceCodester Smart Attendance System with QR Code Scanner cross-site request forgery |
09.11.2026 |
|
| CVE-2026-125076 |
SourceCodester Smart Attendance System with QR Code Scanner JSON Endpoint attendance_handler.php missing authentication |
09.11.2026 |
|
| CVE-2026-125360 |
Storyden through 1.26.16 Privilege Escalation via MANAGE_ROLES Role Assignment |
09.11.2026 |
|
| CVE-2026-125361 |
Tencent BrowserSkill through 0.4.2 Missing Authentication in Local WebSocket Transport |
09.11.2026 |
|
| CVE-2026-125362 |
Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint |
09.11.2026 |
|
| CVE-2026-125363 |
MikroDash before 0.8.79 SSRF via Personal Notification Channels |
09.11.2026 |
|
| CVE-2026-125364 |
frab through 0.9.1 Privilege Escalation via conference_users_attributes in UsersController |
09.11.2026 |
|
| CVE-2026-125365 |
DollarDollar through 4.4 Missing Authorization in /add_expense Balance Tampering |
09.11.2026 |
|
| CVE-2026-125366 |
Omnom through 0.9.0 SSRF via Add Feed /add_feed Route |
09.11.2026 |
|
| CVE-2026-125367 |
Pico through 4.1.2 SSRF in Feeds Service via run SSH Command |
09.11.2026 |
|
| CVE-2026-125368 |
OmniAgent Bash Approval Gate Bypass via find -execdir in Safe-Command Allowlist |
09.11.2026 |
|
| CVE-2026-125369 |
Bitpoll through 0.11.0 Unauthenticated Vote and Comment Disclosure via Unscoped Lookups |
09.11.2026 |
|
| CVE-2026-125370 |
Kubero 3.0.0 through 3.1.1 Authentication Bypass via Hardcoded JWT Secret |
09.11.2026 |
|
| CVE-2026-125371 |
Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match |
09.11.2026 |
|
| CVE-2026-125372 |
REBUILD before 4.5.3 Authorization Bypass via Feeds Details and Comments Endpoints |
09.11.2026 |
|
| CVE-2026-125373 |
IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views |
09.11.2026 |
|
| CVE-2026-125374 |
Krayin CRM before 2.2.8 Broken Object Level Authorization via Lead Tag Attach/Detach |
09.11.2026 |
|
| CVE-2026-125375 |
MrDoc through 1.1.1 Missing Authorization via Project Document Sort Handlers |
09.11.2026 |
|
| CVE-2026-125376 |
VanBlog through 0.54.0 Private Article Disclosure via Public Password Endpoint |
09.11.2026 |
|
| CVE-2026-125377 |
Pig before 4.1.2 Missing Authorization Exposes OAuth2 Client Secrets via /client |
09.11.2026 |
|
| CVE-2026-125378 |
PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply Endpoint |
09.11.2026 |
|
| CVE-2026-125379 |
Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read |
09.11.2026 |
|
| CVE-2026-125380 |
DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/test |
09.11.2026 |
|
| CVE-2026-125381 |
DataRoom through 3.0.0 SQL Injection via MyBatisService.generateSql |
09.11.2026 |
|
| CVE-2026-125382 |
Map-OS 5.0.0 to before 5.2.2 Privilege Escalation via /api/v1/usuarios |
09.11.2026 |
|
| CVE-2026-125383 |
INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass |
09.11.2026 |
|
| CVE-2026-125384 |
INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder |
09.11.2026 |
|
| CVE-2026-125385 |
INDOTALENT WHMS before 10.20261109 Path Traversal via FileDocument/GetDocument and FileImage/GetImage |
09.11.2026 |
|
| CVE-2026-125386 |
langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints |
09.11.2026 |
|
| CVE-2026-125387 |
Faveo Helpdesk through 2.0.3 Cross-Department Ticket Tampering via TicketController |
09.11.2026 |
|
| CVE-2026-125388 |
Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report Download |
09.11.2026 |
|
| CVE-2026-125389 |
Group-Office before 6.8.181, 25.0.116, and 26.0.58 Stored XSS via filterXSS Bypass |
09.11.2026 |
|
| CVE-2026-125390 |
Group-Office before 6.8.181, 25.0.116, and 26.0.58 Local File Read via processUploadQueue |
09.11.2026 |
|
| CVE-2026-125391 |
Webmin through 2.670 OS Command Injection via Samba User Account Options |
09.11.2026 |
|
| CVE-2026-125392 |
Webmin through 2.670 Stored XSS via BIND8 edit_recs.cgi ALL View |
09.11.2026 |
|
| CVE-2026-125393 |
MailEnable Enterprise Premium before 10.62 Heap Overflow via IMAP X-FB-FETCH |
09.11.2026 |
|
| CVE-2026-125394 |
FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer |
09.11.2026 |
|
| CVE-2026-125395 |
Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tag |
09.11.2026 |
|
| CVE-2026-125396 |
Ghostscript before 10.08.0 -dSAFER Bypass via .putgstringcopy .forceput Recovery |
09.11.2026 |
|
| CVE-2026-125397 |
NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Override |
09.11.2026 |
|
| CVE-2026-125398 |
Instatic before 0.0.21 Authorization Bypass via Row Author Reassignment Endpoint |
09.11.2026 |
|
| CVE-2026-125399 |
Fluxion before 6.39 OS Command Injection via Crafted SSID |
09.11.2026 |
|
| CVE-2026-125400 |
Ettercap through 0.8.4.1 Use-After-Free via PCRE2 Filter Substitution |
09.11.2026 |
|
| CVE-2026-125401 |
Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissector |
09.11.2026 |
|
| CVE-2026-125402 |
Ettercap through 0.8.4.1 Heap Out-of-Bounds Read via TLS SNI Parsing |
09.11.2026 |
|
| CVE-2026-125403 |
Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts |
09.11.2026 |
|
| CVE-2026-125404 |
Ettercap through 0.8.4.1 Stack Buffer Overflow via WPA CCMP Decryption |
09.11.2026 |
|
| CVE-2026-125405 |
Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsing |
09.11.2026 |
|
| CVE-2026-125406 |
Ettercap through 0.8.4.1 Stack Buffer Underwrite via Telnet Dissector Backspace Handling |
09.11.2026 |
|
| CVE-2026-117477 |
|
09.11.2026 |
6.1 |
| CVE-2026-125357 |
Munin munin-httpd through 2.999.18 Path Traversal via Static File Handler |
09.11.2026 |
|
| CVE-2026-125358 |
Universal-modder before e88f687 Cross-Site WebSocket Command Execution via HostLink |
09.11.2026 |
|
| CVE-2026-125359 |
Mediary Scout before 2026.11.05 SSRF via PanSou Search Source Setting |
09.11.2026 |
|
| CVE-2026-125075 |
SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create_admin.php getMessage missing authentication |
09.11.2026 |
|
| CVE-2026-115934 |
SQL injection leading to privilege escalation |
09.11.2026 |
|
| CVE-2026-125074 |
SourceCodester Smart Attendance System with QR Code Scanner Password Reset reset_password.php password recovery |
09.11.2026 |
|
| CVE-2026-125118 |
Mongoose: Prototype pollution via Schema.prototype.virtual() |
09.11.2026 |
6.5 |
| CVE-2026-125119 |
Mongoose: Connection-level sanitizeFilter not applied |
09.11.2026 |
7.5 |
| CVE-2026-125120 |
Mongoose: sanitizeFilter not applied on countDocuments |
09.11.2026 |
9.8 |
| CVE-2026-124034 |
Path traversal in Amazon Braket SDK local hybrid job input data download |
09.11.2026 |
6.4 |
| CVE-2026-124035 |
Unsafe reflection in Amazon Braket Schemas error mitigation validation |
09.11.2026 |
7.1 |
| CVE-2026-125117 |
Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state |
09.11.2026 |
8.2 |
| CVE-2026-125116 |
Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections |
09.11.2026 |
4.8 |
| CVE-2026-125113 |
XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." pattern |
09.11.2026 |
5.3 |
| CVE-2026-125114 |
Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection |
09.11.2026 |
|
| CVE-2026-125115 |
Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition |
09.11.2026 |
6.8 |
| CVE-2026-124999 |
braindecode Hub Integration base.py EEGModuleMixin._from_pretrained path traversal |
09.11.2026 |
|
| CVE-2026-125110 |
Rack: Rack::Static header_rules bypass via dot-segment normalization mismatch |
09.11.2026 |
5.3 |
| CVE-2026-125111 |
Rack: Multipart parsing allows DoS via unbounded scan buffer growth |
09.11.2026 |
7.5 |
| CVE-2026-125112 |
djust: A template binding inherits a context safety grant it never earned (XSS) |
09.11.2026 |
|
| CVE-2026-90585 |
Renesas RA SCI UART driver: unacknowledged receive-error interrupt causes a permanent interrupt storm and CPU lockup |
09.11.2026 |
4.6 |
| CVE-2026-90586 |
Xtensa MMU userspace: uninitialized thread page-table pointer leads to out-of-bounds supervisor-mode writes |
09.11.2026 |
7.8 |
| CVE-2026-90587 |
NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurations |
09.11.2026 |
4.6 |
| CVE-2026-90588 |
Out-of-bounds read in Zephyr HTTP client debug logging of response header fields |
09.11.2026 |
3.7 |
| CVE-2026-90589 |
Memory-mapped thread stack is never unmapped when a thread is aborted by another thread, exhausting kernel virtual address space |
09.11.2026 |
5.5 |
| CVE-2026-90590 |
Permanent loss of transmit capability in the NXP ENET QoS Ethernet driver after an Ethernet link drop |
09.11.2026 |
6.5 |
| CVE-2026-90591 |
NXP ENET-QOS Ethernet driver re-arms RX descriptors with a clobbered DMA buffer address on packet drop |
09.11.2026 |
7.5 |
| CVE-2026-125108 |
Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypass |
09.11.2026 |
3.7 |
| CVE-2026-125109 |
Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835 |
09.11.2026 |
4.8 |
| CVE-2026-102643 |
AsyncSSH: SFTPServer Chroot Escape |
09.11.2026 |
8.8 |
| CVE-2026-77473 |
AsyncSSH: SFTP Recursive Copy Path Traversal via Unsanitized Server-Supplied Filenames |
09.11.2026 |
6.5 |
| CVE-2026-124996 |
Turboderp-org ExLlamaV3 hash-MoE routing routing.cu routing_sel_norm_kernel out-of-bounds |
09.11.2026 |
|
| CVE-2026-102289 |
zizmor: Debug logging prints available GitHub credentials in cleartext |
09.11.2026 |
|
| CVE-2026-104259 |
ModSecurity: removeComments Transformation Fails to Strip Adjacent Comments, Enabling WAF Rule Bypass |
09.11.2026 |
5.4 |
| CVE-2026-61812 |
ModSecurity: HTML decoder missing entities, leading to evasion |
09.11.2026 |
|
| CVE-2026-73857 |
ModSecurity v3 XML Request Body Processor Uninitialized Pointer Dereference Vulnerability |
09.11.2026 |
7.5 |
| CVE-2026-114031 |
Local privilege escalation via insecure folder permissions |
09.11.2026 |
7.8 |
| CVE-2026-114032 |
Local privilege escalation via untrusted OpenSSL configuration |
09.11.2026 |
7.8 |
| CVE-2026-125105 |
Wagtail: Identification of documents by SHA1 hash |
09.11.2026 |
3.7 |
| CVE-2026-125106 |
Wagtail: Improper restriction handling on Page translation API endpoint |
09.11.2026 |
6.5 |
| CVE-2026-125107 |
Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key |
09.11.2026 |
7.5 |
| CVE-2026-123818 |
LMDeploy URL parser disagreement permits SSRF filter bypass |
09.11.2026 |
7.5 |
| CVE-2026-123819 |
Wagtail: Improper permission handling when copying snippets |
09.11.2026 |
6.5 |
| CVE-2026-123820 |
Wagtail: Improper restriction handling on descendant collections in Documents and Images API |
09.11.2026 |
5.3 |
| CVE-2026-63644 |
bird-lg-go: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an Unauthorized Actor in github.com/xddxdd/bird-lg-go |
09.11.2026 |
7.5 |
| CVE-2026-115864 |
Monoceros versions before 0.30 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory |
10.11.2026 |
|
| CVE-2026-123815 |
pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=) |
09.11.2026 |
|
| CVE-2026-123816 |
pyLoad: Authentication bypass in API key validation (check_apikey cache) |
09.11.2026 |
8.1 |
| CVE-2026-123817 |
AIOHTTP WebSocket frame reassembly permits excessive memory consumption from tiny reads |
09.11.2026 |
|
| CVE-2026-123811 |
Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server` |
09.11.2026 |
7.5 |
| CVE-2026-123812 |
Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate |
09.11.2026 |
3.7 |
| CVE-2026-123813 |
pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session |
09.11.2026 |
7.5 |
| CVE-2026-123814 |
pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host |
09.11.2026 |
6.4 |
| CVE-2026-124033 |
Relative path traversal in the log export commands in AWS ParallelCluster CLI |
09.11.2026 |
6.4 |
| CVE-2026-123810 |
Dynatrace MCP Server: DQL injection via parameters not documented as DQL |
09.11.2026 |
4.3 |
| CVE-2026-63496 |
augment-vir: Shell Command Injection in `grep()` via Unsanitized `searchPattern` |
09.11.2026 |
7.8 |
| CVE-2026-63634 |
pympp: Gas Draining with padding |
09.11.2026 |
|
| CVE-2026-123809 |
Dynatrace MCP Server: Workflow template injection via create_workflow_for_notification |
09.11.2026 |
4.2 |
| CVE-2026-63497 |
titra: residual mass assignment via customfields in timeentry/create and project/task/create |
09.11.2026 |
|
| CVE-2026-124994 |
Turboderp-org ExLlamaV3 NGramEmbedding ngram.cu ngram_dequant out-of-bounds |
09.11.2026 |
|
| CVE-2026-123807 |
Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution |
09.11.2026 |
9.8 |
| CVE-2026-123808 |
Nuxt UI: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration |
09.11.2026 |
5.3 |
| CVE-2026-122056 |
Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service |
09.11.2026 |
|
| CVE-2026-124992 |
nushell Data Conversion ser.rs escape_bytes control sequence |
09.11.2026 |
|
| CVE-2026-113960 |
|
09.11.2026 |
|
| CVE-2026-113961 |
|
09.11.2026 |
|
| CVE-2026-113963 |
|
09.11.2026 |
|
| CVE-2026-113964 |
|
09.11.2026 |
|
| CVE-2026-113965 |
|
09.11.2026 |
|
| CVE-2026-113968 |
|
09.11.2026 |
|
| CVE-2026-113969 |
|
09.11.2026 |
|
| CVE-2026-113970 |
|
10.11.2026 |
|
| CVE-2026-113971 |
|
09.11.2026 |
|
| CVE-2026-119759 |
TrailBase 0.28.2 < 0.35.10 IDOR via Record API File Column |
09.11.2026 |
|
| CVE-2026-123806 |
python-tuf: Platform-dependent delegation path matching |
09.11.2026 |
4 |
| CVE-2026-56712 |
Replicate Cog 0.23.1 SSRF via cog.File and cog.Path URL Inputs |
09.11.2026 |
|
| CVE-2026-84410 |
apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processing |
09.11.2026 |
|
| CVE-2026-86692 |
apport: Arbitrary file creation or overwrite via path traversal in base64-encoded problem report keys |
09.11.2026 |
|
| CVE-2026-119078 |
Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keys |
10.11.2026 |
|
| CVE-2026-124077 |
Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class) |
10.11.2026 |
|
| CVE-2026-123805 |
SIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS) |
09.11.2026 |
7.5 |
| CVE-2026-124987 |
mikefarah yq encoder_properties.go Encode escape output |
09.11.2026 |
|
| CVE-2026-87857 |
Temporal Server workflow-history pagination token is not bound to the requested namespace and workflow |
09.11.2026 |
|
| CVE-2026-124834 |
iomad Password Field company_user.php store_temporary_password information disclosure |
09.11.2026 |
|
| CVE-2026-125252 |
FFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture Buffers |
09.11.2026 |
|
| CVE-2026-125253 |
FFmpeg through 9.0.2 VP9 CBS Superframe Integer Overflow Out-of-Bounds Read |
09.11.2026 |
|
| CVE-2026-125254 |
FFmpeg through 9.0.2 Division by Zero via VVC ff_vvc_slice_rpl() |
09.11.2026 |
|
| CVE-2026-125255 |
FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated Decoding |
09.11.2026 |
|
| CVE-2026-125256 |
FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes Routine |
09.11.2026 |
|
| CVE-2026-125257 |
FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search |
09.11.2026 |
|
| CVE-2026-125258 |
FFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.c |
09.11.2026 |
|
| CVE-2026-125259 |
FFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks Encoder |
09.11.2026 |
|
| CVE-2026-125260 |
FFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE Path |
09.11.2026 |
|
| CVE-2026-125261 |
FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c |
09.11.2026 |
|
| CVE-2026-125262 |
FFmpeg through 9.0.2 Heap Buffer Overflow via LCEVC Enhancement Decoding |
09.11.2026 |
|
| CVE-2026-125263 |
FFmpeg 9.0 through 9.0.2 Memory Exhaustion via LCEVC Enhancement Dimensions |
09.11.2026 |
|
| CVE-2026-125264 |
FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC Count |
09.11.2026 |
|
| CVE-2026-125265 |
FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer |
09.11.2026 |
|
| CVE-2026-125266 |
FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via SANM Codec 23 |
09.11.2026 |
|
| CVE-2026-125267 |
FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC Decoder |
09.11.2026 |
|
| CVE-2026-125268 |
FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD Decoder |
09.11.2026 |
|
| CVE-2026-125269 |
FFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.c |
09.11.2026 |
|
| CVE-2026-125270 |
FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M Encoder |
09.11.2026 |
|
| CVE-2026-112314 |
Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries |
09.11.2026 |
|
| CVE-2026-112315 |
Krb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failure |
09.11.2026 |
|
| CVE-2026-112316 |
Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failure |
09.11.2026 |
|
| CVE-2026-112317 |
Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error path |
09.11.2026 |
|
| CVE-2026-112318 |
Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers |
09.11.2026 |
|
| CVE-2026-112319 |
Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation |
09.11.2026 |
|
| CVE-2026-112320 |
Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching |
09.11.2026 |
|
| CVE-2026-112321 |
Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths |
09.11.2026 |
|
| CVE-2026-125064 |
FFmpeg through 9.0.2 NULL Pointer Dereference in G.726 ADPCM Decoder |
09.11.2026 |
|
| CVE-2026-125065 |
FFmpeg through 9.0.2 NULL Pointer Dereference via TGV Decoder eatgv.c |
09.11.2026 |
|
| CVE-2026-125066 |
FFmpeg through 9.0.2 NULL Pointer Dereference in CLJR Video Decoder |
09.11.2026 |
|
| CVE-2026-125067 |
FFmpeg through 9.0.2 VBLE Decoder NULL Pointer Dereference via vble_decode_frame() |
09.11.2026 |
|
| CVE-2026-125068 |
FFmpeg through 9.0.2 NULL Pointer Dereference in Bink Video Decoder |
09.11.2026 |
|
| CVE-2026-125069 |
FFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels Decoder |
09.11.2026 |
|
| CVE-2026-125070 |
FFmpeg through 9.0.2 NULL Pointer Dereference in EA TQI Decoder |
09.11.2026 |
|
| CVE-2026-125071 |
FFmpeg through 9.0.2 NULL Pointer Dereference in JV Video Decoder |
09.11.2026 |
|
| CVE-2026-125072 |
FFmpeg through 9.0.2 NULL Pointer Dereference in MPEG Audio Decoder |
09.11.2026 |
|
| CVE-2026-125073 |
FFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC Decoder |
09.11.2026 |
|
| CVE-2026-125095 |
FFmpeg through 9.0.2 C93 Decoder Uninitialized Stack Memory Disclosure |
09.11.2026 |
|
| CVE-2026-125096 |
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via Tiertex SEQ Decoder |
09.11.2026 |
|
| CVE-2026-125097 |
FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via rawdec.c Raw Video Decoder |
09.11.2026 |
|
| CVE-2026-125098 |
FFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH Chunk |
09.11.2026 |
|
| CVE-2026-125099 |
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via GEM Raster Decoder |
09.11.2026 |
|
| CVE-2026-125100 |
FFmpeg through 9.0.2 Integer Overflow in OpenEXR Decoder Tile Count |
09.11.2026 |
|
| CVE-2026-125101 |
FFmpeg through 9.0.2 VMnc Decoder Uninitialized Heap Memory Disclosure |
09.11.2026 |
|
| CVE-2026-125102 |
FFmpeg through 9.0.2 TAK Decoder Uninitialized Memory Disclosure via takdec.c |
09.11.2026 |
|
| CVE-2026-125103 |
FFmpeg through 9.0.2 Uninitialized Heap Disclosure via MLZ Decompressor in ALS Decoder |
09.11.2026 |
|
| CVE-2026-125104 |
FFmpeg through 9.0.2 Memory Exhaustion DoS via APE Decoder apedec.c |
09.11.2026 |
|
| CVE-2026-125170 |
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via targa_decode_rle() |
09.11.2026 |
|
| CVE-2026-125171 |
FFmpeg through 9.0.2 Out-of-Bounds Read in Musepack SV7 Decoder via mpc7.c |
09.11.2026 |
|
| CVE-2026-125172 |
FFmpeg through 9.0.2 Out-of-Bounds Read via libxevd EVC NAL Length |
09.11.2026 |
|
| CVE-2026-125173 |
FFmpeg through 9.0.2 Memory Leak in libxevd EVC Decoder Wrapper |
09.11.2026 |
|
| CVE-2026-125174 |
FFmpeg before 8.1.3 and 9.x before 9.0.2 NULL Pointer Dereference via ff_hap_set_chunk_count() |
09.11.2026 |
|
| CVE-2026-125175 |
FFmpeg through 9.0.2 Information Disclosure via Flash Screen Video Decoder |
09.11.2026 |
|
| CVE-2026-125176 |
FFmpeg through 9.0.2 Uninitialized Memory Read in Flash Screen Video 2 Decoder |
09.11.2026 |
|
| CVE-2026-125177 |
FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via MSCC/SRGC Decoder |
09.11.2026 |
|
| CVE-2026-125178 |
FFmpeg through 9.0.2 Out-of-Bounds Heap Read via TDSC Cursor Dimensions |
09.11.2026 |
|
| CVE-2026-125179 |
FFmpeg through 9.0.2 Heap Memory Disclosure via VQA Video Decoder |
09.11.2026 |
|
| CVE-2026-125180 |
FFmpeg 8.1 through 9.0.2 EXIF Parser Memory Exhaustion via Overlapping Tags |
09.11.2026 |
|
| CVE-2026-125181 |
FFmpeg through 9.0.2 FLIC Decoder Out-of-Bounds Write via FLI_BRUN Byte Swap |
09.11.2026 |
|
| CVE-2026-125182 |
FFmpeg through 9.0.2 Out-of-Bounds Read via Cook Decoder js_subband_start |
09.11.2026 |
|
| CVE-2026-125183 |
FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension Parsing |
09.11.2026 |
|
| CVE-2026-125184 |
FFmpeg 6.1 through 9.0.2 Information Disclosure via CamStudio Decoder cscd.c |
09.11.2026 |
|
| CVE-2026-125185 |
FFmpeg through 9.0.2 Division by Zero via AFGS1 Film Grain Scaling Points |
09.11.2026 |
|
| CVE-2026-125186 |
FFmpeg through 9.0.2 CPU Exhaustion via dts2pts Bitstream Filter |
09.11.2026 |
|
| CVE-2026-125187 |
FFmpeg through 9.0.2 TTA Encoder Reachable Assertion via tta_encode_frame() |
09.11.2026 |
|
| CVE-2026-125188 |
FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced Encoding |
09.11.2026 |
|
| CVE-2026-125189 |
FFmpeg 8.1 through 9.0.2 Denial of Service via lcevc_metadata Bitstream Filter |
09.11.2026 |
|
| CVE-2026-125190 |
FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via MVC2 Decoder |
09.11.2026 |
|
| CVE-2026-125191 |
FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak |
09.11.2026 |
|
| CVE-2026-125192 |
FFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized Buffer |
09.11.2026 |
|
| CVE-2026-125193 |
FFmpeg through 9.0.2 Out-of-Bounds Read via bitpacked_decode_uyvy422() |
09.11.2026 |
|
| CVE-2026-125194 |
FFmpeg through 9.0.2 Out-of-Bounds Read via PCM DVD Encoder |
09.11.2026 |
|
| CVE-2026-125195 |
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via ADPCM_MS Trellis Encoding |
09.11.2026 |
|
| CVE-2026-125196 |
FFmpeg through 9.0.2 Heap Buffer Overflow via liboapv APV Encoder Wrapper |
09.11.2026 |
|
| CVE-2026-125197 |
FFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread Decoding |
09.11.2026 |
|
| CVE-2026-125198 |
FFmpeg through 9.0.2 Memory Leak via MediaCodec JNI setBuffer |
09.11.2026 |
|
| CVE-2026-125199 |
FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame() |
09.11.2026 |
|
| CVE-2026-125200 |
FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU Payloads |
09.11.2026 |
|
| CVE-2026-125201 |
FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 Heap Overflow via vulkan_av1.c |
09.11.2026 |
|
| CVE-2026-125202 |
FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile Arrays |
09.11.2026 |
|
| CVE-2026-125203 |
FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow in Cook Multichannel Decoder |
09.11.2026 |
|
| CVE-2026-125204 |
FFmpeg through 9.0.2 Heap Buffer Overflow in libwebp Encoder Conditional Replenishment |
09.11.2026 |
|
| CVE-2026-125205 |
FFmpeg through 9.0.2 Memory Exhaustion via av1_frame_merge Bitstream Filter |
09.11.2026 |
|
| CVE-2026-125206 |
FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha Encoding |
09.11.2026 |
|
| CVE-2026-125207 |
FFmpeg through 9.0.2 Excessive Memory Allocation via Interplay ACM Decoder |
09.11.2026 |
|
| CVE-2026-125208 |
FFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.c |
09.11.2026 |
|
| CVE-2026-125209 |
FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow via dvdsubenc.c |
09.11.2026 |
|
| CVE-2026-125210 |
FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding |
09.11.2026 |
|
| CVE-2026-125211 |
FFmpeg through 9.0.2 Heap Corruption via libaribcaption ASS Error Cleanup |
09.11.2026 |
|
| CVE-2026-125212 |
FFmpeg through 9.0.2 Heap Buffer Overflow via VideoToolbox Encoder |
09.11.2026 |
|
| CVE-2026-125213 |
FFmpeg through 9.0.2 Heap Buffer Overflow via PSD Decoder RLE Path |
09.11.2026 |
|
| CVE-2026-125214 |
FFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM Decoder |
09.11.2026 |
|
| CVE-2026-125215 |
FFmpeg 7.1 through 9.0.2 NULL Pointer Dereference via ff_dovi_rpu_generate() |
09.11.2026 |
|
| CVE-2026-125216 |
FFmpeg through 9.0.2 DPX Encoder NULL Pointer Dereference via encode_gbrp12() |
09.11.2026 |
|
| CVE-2026-125217 |
FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure |
09.11.2026 |
|
| CVE-2026-125218 |
FFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng() |
09.11.2026 |
|
| CVE-2026-125219 |
FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VDPAU Tile Arrays |
09.11.2026 |
|
| CVE-2026-125220 |
FFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading Failure |
09.11.2026 |
|
| CVE-2026-125221 |
FFmpeg through 9.0.2 Uncontrolled Recursion in FLAC Parser score_header() |
09.11.2026 |
|
| CVE-2026-125222 |
FFmpeg through 9.0.2 Heap Buffer Overflow via hap_parse_frame_header() |
09.11.2026 |
|
| CVE-2026-125223 |
FFmpeg 8.0 through 9.0.2 Memory Leak in VP9 Decoder via vp9_decode_frame |
09.11.2026 |
|
| CVE-2026-125224 |
FFmpeg through 9.0.2 Vorbis Parser CPU Exhaustion via Invalid Extradata |
09.11.2026 |
|
| CVE-2026-125225 |
FFmpeg through 9.0.2 NULL Pointer Dereference via aac_adtstoasc Bitstream Filter |
09.11.2026 |
|
| CVE-2026-125226 |
FFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen Demuxer |
09.11.2026 |
|
| CVE-2026-125227 |
FFmpeg through 9.0.2 Heap Buffer Overflow via cbs_jpeg_write_scan Integer Overflow |
09.11.2026 |
|
| CVE-2026-125228 |
FFmpeg before 8.1.3 and 9.x before 9.0.2 Out-of-Bounds Read in Vorbis Encoder |
09.11.2026 |
|
| CVE-2026-125229 |
FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor |
09.11.2026 |
|
| CVE-2026-125230 |
FFmpeg through 9.0.2 Integer Overflow Division by Zero via pcm_rechunk Filter |
09.11.2026 |
|
| CVE-2026-125231 |
FFmpeg 4.4 through 9.0.2 NULL Pointer Dereference via adx_decode_header() |
09.11.2026 |
|
| CVE-2026-125232 |
FFmpeg through 9.0.2 Division by Zero in B-frame Motion Estimation |
09.11.2026 |
|
| CVE-2026-125233 |
FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle Encoder |
09.11.2026 |
|
| CVE-2026-125234 |
FFmpeg through 9.0.2 WavPack Encoder Integer Overflow Infinite Loop via wavpack_encode_init |
09.11.2026 |
|
| CVE-2026-125235 |
FFmpeg through 9.0.2 Heap Overflow via QSV Encoder submit_frame() |
09.11.2026 |
|
| CVE-2026-125236 |
FFmpeg through 9.0.2 VVC Decoder Memory Leak via alloc_frame() |
09.11.2026 |
|
| CVE-2026-125237 |
FFmpeg 8.1 through 9.0.2 Denial of Service via DPX Vulkan Hwaccel Error Path |
09.11.2026 |
|
| CVE-2026-125238 |
FFmpeg through 9.0.2 Reachable Assertion in libxevd EVC Decoder Wrapper |
09.11.2026 |
|
| CVE-2026-125239 |
FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC DXVA Tile Parameters |
09.11.2026 |
|
| CVE-2026-125240 |
FFmpeg through 9.0.2 Resource Leak in libsvtjpegxs JPEG XS Decoder Wrapper |
09.11.2026 |
|
| CVE-2026-125241 |
FFmpeg through 9.0.2 Heap Buffer Overflow via FLIC Decoder check_pixel_ptr |
09.11.2026 |
|
| CVE-2026-125242 |
FFmpeg through 9.0.2 Memory Leak via VDPAU Hwaccel Bitstream Buffer Table |
09.11.2026 |
|
| CVE-2026-125243 |
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS Decoder |
09.11.2026 |
|
| CVE-2026-125244 |
FFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_points |
09.11.2026 |
|
| CVE-2026-125245 |
FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding |
09.11.2026 |
|
| CVE-2026-125246 |
FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragment |
09.11.2026 |
|
| CVE-2026-125247 |
FFmpeg through 9.0.2 Integer Overflow via dng_decode_tiles() in libavcodec/tiff.c |
09.11.2026 |
|
| CVE-2026-125248 |
FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap Buffer |
09.11.2026 |
|
| CVE-2026-125249 |
FFmpeg 7.1 through 9.0.2 Heap Out-of-Bounds Write via Vulkan Slice Buffer Sizing |
09.11.2026 |
|
| CVE-2026-125250 |
FFmpeg through 9.0.2 GIF Encoder Heap Buffer Overflow via shrunk_buf Remap |
09.11.2026 |
|
| CVE-2026-125251 |
FFmpeg through 9.0.2 VVC Decoder Heap Out-of-Bounds Write via refs.c |
09.11.2026 |
|
| CVE-2026-12977 |
Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalation |
09.11.2026 |
|
| CVE-2026-123804 |
SuperTokens Core: A session created concurrently with account unlink survives the unlink |
09.11.2026 |
6.8 |
| CVE-2026-123803 |
SuperTokens Core: WebAuthn sign-in accepts a passkey across tenant boundaries |
09.11.2026 |
8.1 |
| CVE-2026-124001 |
ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR |
09.11.2026 |
|
| CVE-2026-112322 |
Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup |
09.11.2026 |
|
| CVE-2026-112323 |
Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests |
09.11.2026 |
|
| CVE-2026-119079 |
Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding |
09.11.2026 |
|
| CVE-2026-123999 |
ION-DTN 3.6.2-4.2.0 Heap Buffer Overflow via nm_mgr AMP Rendering |
09.11.2026 |
|
| CVE-2026-124000 |
ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd |
09.11.2026 |
|
| CVE-2026-120834 |
WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerability |
09.11.2026 |
7.3 |
| CVE-2026-121573 |
WordPress WP Activity Log plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability |
09.11.2026 |
6.5 |
| CVE-2026-121769 |
WordPress WP w3all phpBB plugin <= 3.1.9 - SQL Injection vulnerability |
09.11.2026 |
8.5 |
| CVE-2026-123798 |
SuperTokens Core: SAML XML Signature Wrapping authentication bypass — any IdP user can authenticate as any other user |
09.11.2026 |
8.1 |
| CVE-2026-123799 |
SuperTokens Core: Dashboard session tokens are never checked for expiry: `isValidUserSession` ignores the stored `expiry`, so a long-expired admin session still authenticates |
09.11.2026 |
7.4 |
| CVE-2026-123800 |
SuperTokens Core: App-scoped API key can overwrite the parent connection URI domain's credentials and take over sibling applications |
09.11.2026 |
9.9 |
| CVE-2026-123801 |
SuperTokens Core: SAML callback accepts a replayed RelayState + SAMLResponse, minting a fresh authorization code on each replay |
09.11.2026 |
7.4 |
| CVE-2026-123802 |
SuperTokens Core SAML: identity taken from an assertion that never passed the audience check, allowing sign-in as any IdP user |
09.11.2026 |
8.1 |
| CVE-2026-125040 |
Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service |
09.11.2026 |
|
| CVE-2026-125041 |
Gst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layout |
09.11.2026 |
|
| CVE-2026-70555 |
rConfig Core 8.2.3 < 8.2.13 Cleartext Credential Exposure via API |
09.11.2026 |
|
| CVE-2026-84503 |
Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce |
09.11.2026 |
|
| CVE-2026-123797 |
SuperTokens Core: Unknown tenant path bypasses API key and public-tenant enforcement |
09.11.2026 |
7.5 |
| CVE-2026-125063 |
Automation-controller: automation-controller: quadratic regex in schedule rrule validation allows an authenticated user to exhaust api web workers (denial of service) |
09.11.2026 |
|
| CVE-2026-123373 |
compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its output |
09.11.2026 |
|
| CVE-2026-123796 |
compose-lint: Incomplete fix for GHSA-jf3h-8jvx-vcrg: a run stopped at the finding limit quotes a secret from a CI-generated `.env` |
09.11.2026 |
|
| CVE-2026-60117 |
receive_sharing_intent 1.4.1-1.9.0 Path Traversal via FileDirectory |
09.11.2026 |
|
| CVE-2026-123270 |
CVE-2026-123270 |
09.11.2026 |
|
| CVE-2026-123369 |
compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action |
09.11.2026 |
|
| CVE-2026-123370 |
compose-lint: `fix --apply` can delete a line the user did not select, including a security setting |
09.11.2026 |
|
| CVE-2026-123371 |
compose-lint: A `.compose-lint.yml` symlinked outside the project is read, and a parse error quotes part of the target |
09.11.2026 |
|
| CVE-2026-123372 |
compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findings |
09.11.2026 |
|
| CVE-2026-119755 |
Tasmota 16.0.0 CSRF via Referer Header Validation Bypass |
09.11.2026 |
|
| CVE-2026-119756 |
Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP |
09.11.2026 |
|
| CVE-2026-123368 |
compose-lint: .env read through a symlink outside the project can expose the CI job's environment |
09.11.2026 |
|
| CVE-2026-123367 |
ThorVG: Heap buffer overflow (OOB write) in bundled jpgd JPEG decoder |
09.11.2026 |
7.4 |
| CVE-2026-19706 |
Openshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrap |
09.11.2026 |
|
| CVE-2026-104989 |
Pre-authentication remote code execution in Chaos V-Ray Swarm |
09.11.2026 |
|
| CVE-2026-123364 |
OctoPrint: Stored XSS via saved connection parameters |
09.11.2026 |
|
| CVE-2026-121576 |
WordPress MCP Server for WordPress plugin <= 2.0.1 - Privilege Escalation vulnerability |
09.11.2026 |
8.8 |
| CVE-2026-121612 |
WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.6.2 - Broken Authentication vulnerability |
09.11.2026 |
4.3 |
| CVE-2026-122664 |
WordPress Broadcast Live Video plugin <= 7.3.14 - Cross Site Scripting (XSS) vulnerability |
09.11.2026 |
7.1 |
| CVE-2026-123482 |
WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability |
09.11.2026 |
7.1 |
| CVE-2026-115336 |
FTP Quota Accounting Bypass in Progress WS_FTP Server |
09.11.2026 |
6.5 |
| CVE-2026-115337 |
Folder Permission Bypass in Progress WS_FTP Server |
09.11.2026 |
6.3 |
| CVE-2026-115339 |
Unauthenticated XFT Memory Exhaustion in Progress WS_FTP Server |
09.11.2026 |
7.5 |
| CVE-2026-115340 |
Insecure Storage of Web Transfer Credentials in Progress WS_FTP Server |
09.11.2026 |
7.1 |
| CVE-2026-115341 |
Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP Server |
09.11.2026 |
7.7 |
| CVE-2026-115338 |
Insecure XFT Transport in Progress WS_FTP Server |
10.11.2026 |
8.1 |
| CVE-2026-112165 |
Disabled TLS Certificate Validation Enables MITM Attacks |
09.11.2026 |
|
| CVE-2026-121690 |
CVE-2026-121690 |
09.11.2026 |
|
| CVE-2026-121687 |
CVE-2026-121687 |
09.11.2026 |
|
| CVE-2026-121688 |
CVE-2026-121688 |
09.11.2026 |
|
| CVE-2026-121689 |
CVE-2026-121689 |
09.11.2026 |
|
| CVE-2026-121685 |
CVE-2026-121685 |
09.11.2026 |
|
| CVE-2026-121686 |
CVE-2026-121686 |
09.11.2026 |
|
| CVE-2026-103906 |
Disabled TLS Certificate Validation Enables MITM Attacks |
09.11.2026 |
|
| CVE-2026-112164 |
Hardcoded AES Key Enables Credential Disclosure |
09.11.2026 |
|
| CVE-2026-114594 |
Time-of-check time-of-use (TOCTOU) race condition in Sandisk Dashboard Installer |
09.11.2026 |
|
| CVE-2026-124683 |
|
09.11.2026 |
|