- Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised
SecurityWeek · Thu, 05 Nov 2026 12:58:32 +0000
- Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
SecurityWeek · Thu, 05 Nov 2026 12:33:49 +0000
- CVE-2026-54377 — VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to access another user's data by supplying a difMEDIUM
NVD · 2026-11-04T22:18:05.580
- CVE-2026-54376 — VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application to intercept Fitbit login tokenHIGH
NVD · 2026-11-04T22:18:05.407
- CVE-2026-54375 — VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or intercept unencrypted m_sessioHIGH
NVD · 2026-11-04T22:18:05.240
- CVE-2026-54374 — VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract confidential third-party integration secHIGH
NVD · 2026-11-04T22:18:05.070
- CVE-2026-54373 — VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to intercept or modify unencrypted HTTP cLOW
NVD · 2026-11-04T22:18:04.873
- The Agent Smith Dilemma: Governing Agentic Identities
SecurityWeek · Thu, 05 Nov 2026 11:15:00 +0000
- CVE-2026-54372 — VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerability that allows network-based attackers to intercept and mHIGH
NVD · 2026-11-04T22:18:04.667
- CVE-2026-122266 — Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent useHIGH
NVD · 2026-11-04T22:17:56.383
- CVE-2026-122020 — A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the compMEDIUM
NVD · 2026-11-04T22:17:56.157
- CVE-2026-122019 — A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login HIGH
NVD · 2026-11-04T22:17:55.930
- CVE-2026-122016 — A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPermissionService.getMenuPermission of the file SysPermissionService.java MEDIUM
NVD · 2026-11-04T22:17:55.693
- CVE-2026-122015 — A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX ProviMEDIUM
NVD · 2026-11-04T22:17:55.427
- CVE-2026-121751 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.39.6 through 0.40.8, `nvm ls-remote` (and other commands that rLOW
NVD · 2026-11-04T22:17:55.060
- CVE-2026-121750 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.5 through 0.40.8, `nvm_download_artifact` downloads a releasLOW
NVD · 2026-11-04T22:17:54.873
- CVE-2026-121749 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.5.0 through 0.40.8, the requested version pattern is passed to LOW
NVD · 2026-11-04T22:17:54.700
- CVE-2026-121748 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.27.0 through 0.40.8, when a project's `.npmrc` sets `prefix`, `LOW
NVD · 2026-11-04T22:17:54.523
- CVE-2026-121747 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.2.0 through 0.40.8, nvm does not check whether `.nvmrc` is a syMEDIUM
NVD · 2026-11-04T22:17:54.337
- CVE-2026-121746 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, `nvm use --save` and `nvm install --save` MEDIUM
NVD · 2026-11-04T22:17:54.160
- CVE-2026-121745 — Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, when `NVM_AUTH_HEADER` is set, `nvm_downloLOW
NVD · 2026-11-04T22:17:53.970
- CVE-2026-115473 — Mongoose is an embedded web server and network library. Prior to 7.22, mg_path_is_sane in src/util.c read path.buf[1] without first requiring path.len to be at least two and read sMEDIUM
NVD · 2026-11-04T22:17:50.503
- CVE-2026-103002 — GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-adHIGH
NVD · 2026-11-04T22:17:44.783
- CVE-2026-102895 — GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback requeCRITICAL
NVD · 2026-11-04T22:17:44.613
- CVE-2026-102894 — GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used iCRITICAL
NVD · 2026-11-04T22:17:44.440
- CVE-2026-102280 — Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SH
NVD · 2026-11-04T22:17:42.873
- CVE-2026-97373 — draw.io is a configurable diagramming and whiteboarding application. Prior to 30.3.8, the optional /proxy endpoint contains an incomplete server-side request forgery blocklist. WheMEDIUM
NVD · 2026-11-04T21:18:17.063
- CVE-2026-82418 — IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.CRITICAL
NVD · 2026-11-04T21:18:14.940
- CVE-2026-19319 — IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.MEDIUM
NVD · 2026-11-04T21:18:13.353
- Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
SecurityWeek · Thu, 05 Nov 2026 10:56:41 +0000
- CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality
SecurityWeek · Thu, 05 Nov 2026 11:00:00 +0000
- Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
SecurityWeek · Thu, 05 Nov 2026 10:37:13 +0000
- 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
The Hacker News · Thu, 05 Nov 2026 15:36:19 +0530
- CVE-2026-18142 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a HIGH
NVD · 2026-11-04T21:18:13.187
- CVE-2026-17493 — IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.HIGH
NVD · 2026-11-04T21:18:13.020
- CVE-2026-16725 — IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.MEDIUM
NVD · 2026-11-04T21:18:12.860
- CVE-2026-14252 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentiMEDIUM
NVD · 2026-11-04T21:18:12.447
- CVE-2026-13292 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow anHIGH
NVD · 2026-11-04T21:18:12.290
- CVE-2026-13289 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable HIGH
NVD · 2026-11-04T21:18:12.120
- CVE-2026-13284 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable HIGH
NVD · 2026-11-04T21:18:11.947
- CVE-2026-13271 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File THIGH
NVD · 2026-11-04T21:18:11.777
- CVE-2026-12550 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow anMEDIUM
NVD · 2026-11-04T21:18:11.610
- CVE-2026-12538 — IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to iMEDIUM
NVD · 2026-11-04T21:18:11.440
- CVE-2026-12356 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow anHIGH
NVD · 2026-11-04T21:18:11.270
- CVE-2026-122235 — Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symliMEDIUM
NVD · 2026-11-04T21:18:11.103
- CVE-2026-122234 — jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. AMEDIUM
NVD · 2026-11-04T21:18:10.930
- CVE-2026-122233 — FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP stream response headers between requests, because the reset oLOW
NVD · 2026-11-04T21:18:10.743
- CVE-2026-122224 — WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authenticated users to reach MigrateViewSet and CreateInstanceViewSet HIGH
NVD · 2026-11-04T21:18:10.547
- CVE-2026-122140 — Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 adMEDIUM
NVD · 2026-11-04T21:18:10.370
- CVE-2026-122139 — blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registeMEDIUM
NVD · 2026-11-04T21:18:10.203
- OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
SecurityWeek · Thu, 05 Nov 2026 10:02:00 +0000
- CVE-2026-122138 — BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerability in LoginMiddleware.php that keys failed-login counters on case-sensitive usernamMEDIUM
NVD · 2026-11-04T21:18:10.017
- CVE-2026-122137 — Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fMEDIUM
NVD · 2026-11-04T21:18:09.807
- CVE-2026-122136 — Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictableMEDIUM
NVD · 2026-11-04T21:18:09.587
- CVE-2026-122135 — Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context cHIGH
NVD · 2026-11-04T21:18:09.423
- CVE-2026-122134 — Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a reHIGH
NVD · 2026-11-04T21:18:09.260
- CVE-2026-122133 — Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lHIGH
NVD · 2026-11-04T21:18:09.087
- CVE-2026-122132 — go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attackers to redirect victims to external hosts by embedding taMEDIUM
NVD · 2026-11-04T21:18:08.890
- GhostMap Android flaw lets malicious app trigger persistent boot loop
BleepingComputer · Thu, 05 Nov 2026 04:18:29 -0500
- CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
The Hacker News · Thu, 05 Nov 2026 14:12:03 +0530
- Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
The Hacker News · Thu, 05 Nov 2026 14:43:28 +0530
- CVE-2026-122131 — Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains a prototype pollution vulnerability in lib/messages.js compile() and merge() that fails to reject a __proto__ language LOW
NVD · 2026-11-04T21:18:08.710
- CVE-2026-122130 — CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer HIGH
NVD · 2026-11-04T21:18:08.543
- CVE-2026-122129 — CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that allows unauthenticated attackers to exhaust memory by declariMEDIUM
NVD · 2026-11-04T21:18:08.380
- CVE-2026-122127 — CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declHIGH
NVD · 2026-11-04T21:18:08.200
- CVE-2026-122126 — reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader() that allows malicious TURN servers to overwrite memory via oversized fMEDIUM
NVD · 2026-11-04T21:18:08.027
- CVE-2026-122014 — A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. The manipulation of the argument base_modeMEDIUM
NVD · 2026-11-04T21:18:07.777
- CVE-2026-122013 — A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart ParseCRITICAL
NVD · 2026-11-04T21:18:07.540
- CVE-2026-122009 — A flaw has been found in DataLinkDC Dinky up to 1.2.5. This vulnerability affects the function FlinkWebURITemplateProxyServlet.getNewTargetUri of the file dinky-admin/src/main/javaHIGH
NVD · 2026-11-04T21:18:07.313
- CVE-2026-121969 — netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage() in short.c that allows malicious servers to overflow a 100-byte stack buffeMEDIUM
NVD · 2026-11-04T21:18:06.840
- CVE-2026-121968 — Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage() that allows malicious servers to crash clients via an unchecked m_recpt indMEDIUM
NVD · 2026-11-04T21:18:06.670
- Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
The Hacker News · Thu, 05 Nov 2026 12:36:33 +0530
- CVE-2026-11724 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow anHIGH
NVD · 2026-11-04T21:17:56.573
- CVE-2026-11376 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow anHIGH
NVD · 2026-11-04T21:17:56.403
- CVE-2026-116376 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.LOW
NVD · 2026-11-04T21:17:52.680
- CVE-2026-115762 — draw.io is a configurable diagramming and whiteboarding application. Prior to 31.1.5, the GraphML decoder contains a prototype-pollution vulnerability. Attacker-controlled GraphML MEDIUM
NVD · 2026-11-04T21:17:52.347
- CVE-2026-115758 — SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet() in src/base/Http_win.cpp unconditionally passes INTERNET_FLAG_IGNORE_CERT_CN_INVALID to Win
NVD · 2026-11-04T21:17:52.130
- CVE-2026-110283 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service due to improper validation of user-influenced resource identiMEDIUM
NVD · 2026-11-04T21:17:48.560
- CVE-2026-110282 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper access control.MEDIUM
NVD · 2026-11-04T21:17:48.410
- CVE-2026-110281 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middleMEDIUM
NVD · 2026-11-04T21:17:48.253
- CVE-2026-10859 — IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow anHIGH
NVD · 2026-11-04T21:17:48.103
- CVE-2026-108910 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing required cryptographic step.MEDIUM
NVD · 2026-11-04T21:17:47.443
- CVE-2026-108838 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.LOW
NVD · 2026-11-04T21:17:47.283
- CVE-2026-108767 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response splitting due to improper neutralization of HTTP headers.MEDIUM
NVD · 2026-11-04T21:17:47.127
- CVE-2026-108588 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing X-Content-Type-Options header allowing MIMEDIUM
NVD · 2026-11-04T21:17:46.970
- CVE-2026-108536 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper restriction of rendered UI layers or frameMEDIUM
NVD · 2026-11-04T21:17:46.810
- CVE-2026-105991 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing Content Security Policy header.LOW
NVD · 2026-11-04T21:17:43.160
- CVE-2026-105702 — IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure of error messages containing internal implMEDIUM
NVD · 2026-11-04T21:17:42.983
- CVE-2026-104203 — Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mapping and WebServer.java's Jetty ResourceServlet assign different routingHIGH
NVD · 2026-11-04T21:17:42.327
- CVE-2026-102664 — ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decompress_mysql_payload() in lib/mysql_data_stream.cpp accepts a zlib streHIGH
NVD · 2026-11-04T21:17:41.300
- CVE-2026-102340 — Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-HIGH
NVD · 2026-11-04T21:17:40.683
- CVE-2026-102339 — Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager Tunnel gRPC streaming endpoint parses a session ID froHIGH
NVD · 2026-11-04T21:17:40.500
- CVE-2025-71457 — vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verCRITICAL
NVD · 2026-11-04T21:17:40.340
- CVE-2025-71456 — vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/FaHIGH
NVD · 2026-11-04T21:17:40.183
- CVE-2025-71455 — vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. AttackerMEDIUM
NVD · 2026-11-04T21:17:40.017
- CVE-2025-71454 — vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/VteCsrf.php skips __csrf_token validation for non-POST requestsMEDIUM
NVD · 2026-11-04T21:17:39.840
- CVE-2025-71453 — vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized widgetId keys from the widgetInfoListMEDIUM
NVD · 2026-11-04T21:17:39.657
- CVE-2026-97705 — Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to reHIGH
NVD · 2026-11-04T20:19:13.137
- CVE-2026-76806 — Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-controlled project id values from projects.json in uploaded ZIP importMEDIUM
NVD · 2026-11-04T20:19:12.810
- CVE-2026-122220 — WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-replay check in Saml2_SerHIGH
NVD · 2026-11-04T20:19:12.397
- CVE-2026-122192 — Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memHIGH
NVD · 2026-11-04T20:19:12.210
- CVE-2026-121933 — A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of CRITICAL
NVD · 2026-11-04T20:19:11.607
- CVE-2026-115574 — Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled exposed the GET /json/users endpoint to logged-out spectators,MEDIUM
NVD · 2026-11-04T20:19:02.313
- CVE-2026-115474 — Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other users in the organization setting restricted guests from vieMEDIUM
NVD · 2026-11-04T20:19:01.983
- CVE-2026-113374 — Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (ne
NVD · 2026-11-04T20:18:57.057
- CVE-2026-113373 — Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose acco
NVD · 2026-11-04T20:18:56.750
- CVE-2026-113372 — Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. T
NVD · 2026-11-04T20:18:56.483
- CVE-2026-113371 — Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for
NVD · 2026-11-04T20:18:56.297
- CVE-2026-113370 — Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task. A user who holds the nexus:tasks:create privilege can su
NVD · 2026-11-04T20:18:56.137
- CVE-2026-113369 — Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store scr
NVD · 2026-11-04T20:18:55.987
- CVE-2026-113368 — Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account
NVD · 2026-11-04T20:18:55.670
- CVE-2026-97701 — Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, the authenticated POST /messages/render endpoint renders the content parameter without enforMEDIUM
NVD · 2026-11-04T19:17:41.793
- CVE-2026-82033 — DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, aHIGH
NVD · 2026-11-04T19:17:41.533
- CVE-2026-82029 — Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-portal contacts to access documents belonging to other vendors and clieMEDIUM
NVD · 2026-11-04T19:17:41.360
- CVE-2026-63183 — OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth derives provider callback URLs from request-controlled host information when neithe
NVD · 2026-11-04T19:17:40.650
- CVE-2026-122148 — In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the
NVD · 2026-11-04T19:17:39.890
- CVE-2026-122124 — On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware cMEDIUM
NVD · 2026-11-04T19:17:39.727
- CVE-2026-122120 — In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote coCRITICAL
NVD · 2026-11-04T19:17:39.560
- CVE-2026-121932 — A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument ping_ip/tracerouCRITICAL
NVD · 2026-11-04T19:17:33.440
- CVE-2026-121931 — A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic FuncCRITICAL
NVD · 2026-11-04T19:17:33.157
- CVE-2026-121930 — A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of CRITICAL
NVD · 2026-11-04T19:17:32.883
- CVE-2026-121929 — A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unknown function of the file /e/member/mspace/index.php. The manipulation of the argument spacLOW
NVD · 2026-11-04T19:17:32.637
- Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The Hacker News · Thu, 05 Nov 2026 10:47:04 +0530
- CVE-2026-121928 — A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing of the file api/utils/file_utils.py of the component Images API. The mLOW
NVD · 2026-11-04T19:17:32.387
- OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
The Hacker News · Thu, 05 Nov 2026 10:01:16 +0530
- Want to Rent an Internet Address at the White House?
Krebs on Security · Thu, 05 Nov 2026 04:36:17 +0000
- CVE-2026-113783 — ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dns_lookup()HIGH
NVD · 2026-11-04T19:17:18.907
- CVE-2026-113782 — ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, and 6.0.3, the OpenThread Border Router Neighbor Discovery pacHIGH
NVD · 2026-11-04T19:17:18.717
- CVE-2026-113780 — ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esp_tee trap entry in esp_tee_vectors_plic.S and esp_tee_vectCRITICAL
NVD · 2026-11-04T19:17:18.493
- CVE-2026-107846 — bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5.2.1, 6.1.8, and 7.0.2, fastMerkleRoot pads odd Merkle-tree levels by hashing the final no
NVD · 2026-11-04T19:17:18.130
- CVE-2026-102345 — Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue-based ticket interface can render ticket article content without the expected output
NVD · 2026-11-04T19:17:17.487
- CVE-2026-57853 — DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary JinjaHIGH
NVD · 2026-11-04T18:17:44.877
- CVE-2026-122118 — In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this wHIGH
NVD · 2026-11-04T18:17:43.667
- CVE-2026-122116 — Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deploMEDIUM
NVD · 2026-11-04T18:17:43.473
- CVE-2026-122054 — Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converMEDIUM
NVD · 2026-11-04T18:17:43.253
- CVE-2026-121971 — The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or auth_basic) into a request before resolving a relative URL aga
NVD · 2026-11-04T18:17:43.077
- CVE-2026-121927 — A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _account_get of the file common/data_source/seafile_connector.py of the coMEDIUM
NVD · 2026-11-04T18:17:42.853
- CVE-2026-76506 — A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct informHIGH
NVD · 2026-11-04T17:17:37.030
- CVE-2026-76419 — A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (UnifMEDIUM
NVD · 2026-11-04T17:17:36.877
- CVE-2026-20241 — A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attMEDIUM
NVD · 2026-11-04T17:17:35.883
- CVE-2026-121926 — A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.addInterceptors of the component Web ManHIGH
NVD · 2026-11-04T17:17:35.513
- CVE-2026-119749 — The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting HIGH
NVD · 2026-11-04T17:17:34.930
- CVE-2026-119748 — The GetPaid plugin for WordPress before 2.8.63 contains an authorization bypass vulnerability that allows unauthenticated attackers to access and manipulate another user's invoice MEDIUM
NVD · 2026-11-04T17:17:34.770
- CVE-2026-119747 — The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the check_post_permissions() method in includes/api/class-getpaid-rest-posts-HIGH
NVD · 2026-11-04T17:17:34.607
- CVE-2026-92704 — SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earlier, the repository-provided debugger frontend tooling is vulnerable whHIGH
NVD · 2026-11-04T16:17:55.097
- CVE-2026-91168 — Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes request correlator in warpgate-protocol-kubernetes/src/correlator.MEDIUM
NVD · 2026-11-04T16:17:54.900
- CVE-2026-91163 — Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/LOW
NVD · 2026-11-04T16:17:54.543
- CVE-2026-122032 — SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back-office access to inject arbitrary SQL by submitting a differing where parameMEDIUM
NVD · 2026-11-04T16:17:50.580
- CVE-2026-121967 — Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, and 2.38.0 before 2.38.1 contains a path traversal vulnerabilMEDIUM
NVD · 2026-11-04T16:17:50.360
- CVE-2026-121966 — Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all cHIGH
NVD · 2026-11-04T16:17:50.107
- CVE-2026-121965 — Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype pollution vulnerability when building objects for Cloud Code triggers and LiveQuery, where a dot noMEDIUM
NVD · 2026-11-04T16:17:49.883
- CVE-2026-121964 — FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment writes BIND_ACK and ALTER_CONTEXT_RESP fragments into a perHIGH
NVD · 2026-11-04T16:17:49.683
- CVE-2026-121963 — FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closiMEDIUM
NVD · 2026-11-04T16:17:49.500
- CVE-2026-121962 — FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User Authorization reads during PROTOCOL_HYBRID_EX CredSSP. A maliciHIGH
NVD · 2026-11-04T16:17:49.320
- CVE-2026-121961 — FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target server can repeatedly sMEDIUM
NVD · 2026-11-04T16:17:49.147
- CVE-2026-121960 — FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crHIGH
NVD · 2026-11-04T16:17:48.970
- CVE-2026-121959 — FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can MEDIUM
NVD · 2026-11-04T16:17:48.793
- CVE-2026-121958 — FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_surface callback truncates surface hash keys to 16 bits, leaving the surface table incHIGH
NVD · 2026-11-04T16:17:48.610
- CVE-2026-121957 — FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planHIGH
NVD · 2026-11-04T16:17:48.423
- CVE-2026-121956 — FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the krb5 default realm into a target principal that has an empty reHIGH
NVD · 2026-11-04T16:17:48.250
- CVE-2026-121955 — FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the emulated SCardContext before its worker thread is cancelled and joined. HIGH
NVD · 2026-11-04T16:17:48.070
- CVE-2026-121954 — FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_bitmap_planar_context_reset commits new dimensions before buffer reallocation succeeds, andMEDIUM
NVD · 2026-11-04T16:17:47.890
- CVE-2026-121953 — FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback sCRITICAL
NVD · 2026-11-04T16:17:47.717
- CVE-2026-121952 — FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_bitmap_cache_v2_capability_set rejects only numCellCaches values above 5, yet the bitmap cache v2 celCRITICAL
NVD · 2026-11-04T16:17:47.530
- CVE-2026-121951 — FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the pHIGH
NVD · 2026-11-04T16:17:47.350
- CVE-2026-121950 — FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_CreateSurface when handling an RDPGFX CREATE_SURFACE PDU, causing an integer wrap and heap buffer overMEDIUM
NVD · 2026-11-04T16:17:47.153
- CVE-2026-119746 — ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login lockout bypass in the integrated module web page. The account lockout mechanism that restricts repeatedMEDIUM
NVD · 2026-11-04T16:17:45.100
- CVE-2026-109518 — On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an
NVD · 2026-11-04T16:17:33.010
- CVE-2026-106554 — One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagList growth (CPU/GC-exhaustion DoS, PoC-proven).
PoC e
NVD · 2026-11-04T16:17:32.640
- CVE-2026-66736 — Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NVD · 2026-11-04T15:17:47.540
- CVE-2026-39431 — On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers (wi
NVD · 2026-11-04T15:17:44.703
- CVE-2026-39430 — On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls are not enforced device-side. Thus, an un
NVD · 2026-11-04T15:17:44.560
- CVE-2026-122008 — Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the UploadFile endpoint of FileController.cs that allows authenticated registered users to maMEDIUM
NVD · 2026-11-04T15:17:43.330
- CVE-2026-122007 — Oqtane Framework before 10.3.0 contains a broken access control vulnerability in SettingController.cs that allows an authenticated site administrator to read and modify settings beMEDIUM
NVD · 2026-11-04T15:17:43.127
- CVE-2026-122006 — The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) beCRITICAL
NVD · 2026-11-04T15:17:42.940
- CVE-2026-121640 — An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway componen
NVD · 2026-11-04T15:17:42.790
- CVE-2026-121639 — A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway h
NVD · 2026-11-04T15:17:42.600
- CVE-2026-121638 — An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between
NVD · 2026-11-04T15:17:42.437
- CVE-2026-121637 — An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to
NVD · 2026-11-04T15:17:42.263
- CVE-2026-121632 — Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping.
process_attrs writes each attribute value into the markup as is.
NVD · 2026-11-04T15:17:42.130
- CVE-2026-121009 — SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func.
injection_guard is documented to apply to every
NVD · 2026-11-04T15:17:42.000
- CVE-2026-121008 — SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile.
The html profile wraps keywords and
NVD · 2026-11-04T15:17:41.873
- CVE-2026-121007 — SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position.
A nested statement such a
NVD · 2026-11-04T15:17:41.733
- CVE-2026-120421 — In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled (`jakarta.faces.CLIENT_WINDOW_MODE=urMEDIUM
NVD · 2026-11-04T15:17:41.590
- CVE-2026-119776 — In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check that OSPFv3 packets have a link-local source address and either a link-local destin
NVD · 2026-11-04T15:17:41.400
- CVE-2026-114627 — Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output.
Under use HTML::Tags or use XML::Tags, a double-quote
NVD · 2026-11-04T15:17:35.167
- CVE-2026-100408 — Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git:* credential exists in Windows Credential Manager and a git-credentialMEDIUM
NVD · 2026-11-04T15:17:21.997
- CVE-2026-100407 — Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wiMEDIUM
NVD · 2026-11-04T15:17:21.797
- CVE-2026-121993 — wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level MEDIUM
NVD · 2026-11-04T14:17:39.050
- CVE-2026-119745 — Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to access a sensitive diagnosticMEDIUM
NVD · 2026-11-04T14:17:30.340
- CVE-2026-118391 — Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the dat
NVD · 2026-11-04T14:17:29.983
- CVE-2026-65555 — Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit fCRITICAL
NVD · 2026-11-04T13:17:30.957
- CVE-2026-121970 — Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handlLOW
NVD · 2026-11-04T13:17:29.670
- CVE-2026-121946 — zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. AttaHIGH
NVD · 2026-11-04T13:17:29.477
- CVE-2026-121945 — CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows any courier to read and modify every incident because Incident operations only checHIGH
NVD · 2026-11-04T13:17:29.313
- CVE-2026-121944 — sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src/capture.c that allows attackers to cause denial of service via crafted NFLOG TLVs. MEDIUM
NVD · 2026-11-04T13:17:29.123
- CVE-2026-121943 — Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP pMEDIUM
NVD · 2026-11-04T13:17:28.923
- CVE-2026-121942 — ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_decode() in zbar/sqcode.c that allows attackers to read heap memory outside the image buffer via craftMEDIUM
NVD · 2026-11-04T13:17:28.740
- CVE-2026-121941 — libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write past a heap allocation by supplying oversizHIGH
NVD · 2026-11-04T13:17:28.560
- CVE-2026-121940 — Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnerability that allows authenticated users to access other users' projects by supplying unscopHIGH
NVD · 2026-11-04T13:17:28.393