| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-114232 | Hig | 0.53 | 8.1 | 0.00 | Nov 5, 2026 | A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which manages user permissions, fails to validate the resourceType field when a user creates a new policy. This allows an attacker to create a policy that applies… | ||
| CVE-2026-112208 | Hig | 0.53 | 8.1 | 0.00 | Nov 5, 2026 | A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source identity and access management solution used to secure modern applications and services. The issue occurs when an attacker who belongs to multiple… | ||
| CVE-2026-111253 | Med | 0.36 | 6.6 | 0.00 | Nov 5, 2026 | A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved… | ||
| CVE-2026-110932 | Hig | 0.49 | 7.5 | 0.01 | Nov 5, 2026 | A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution. The issue occurs because the server fails to validate theme names before using them as keys for an on-disk gzip cache. An unauthenticated attacker can exploit… | ||
| CVE-2026-110931 | Hig | 0.49 | 7.5 | 0.01 | Nov 5, 2026 | A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs when the parser handles a specific element called AuthorityBinding within an authentication statement. Due to an incomplete fix for a previous… | ||
| CVE-2026-107602 | Hig | 0.49 | 7.5 | 0.01 | Nov 5, 2026 | A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The issue occurs when the parser encounters unexpected elements within a security token's key information section, causing the processing thread to enter an… | ||
| CVE-2026-107123 | Hig | 0.49 | 7.5 | 0.01 | Nov 5, 2026 | A flaw was found in the SAML XML processing component of Keycloak, an open-source identity and access management solution. The issue occurs when the server parses XML documents containing excessively long dateTime or duration values. Because these strings are not properly… | ||
| CVE-2026-104867 | Med | 0.21 | 4.3 | 0.00 | Nov 5, 2026 | Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 until 3.2.0, the GET /api/admin/users/{id}/calendar-heatmap route in server/src/controllers/user-admin.controller.ts uses the ordinary Permission.UserRead permission without an admin-route… | ||
| CVE-2026-103112 | Hig | 0.49 | 7.5 | 0.00 | Nov 5, 2026 | A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to verify if an authenticator is valid for the current authentication flow when switching between the standard authentication path… | ||
| CVE-2026-102739 | Hig | 0.44 | 7.8 | 0.00 | Nov 5, 2026 | ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6_optimize_filter_params.py, tools/1_analyze_raw_data.py, and tools/10_train_ml_model.py, load NPZ datasets with NumPy pickle support enabled through… | ||
| CVE-2026-85286 | Low | 0.17 | 3.7 | 0.00 | Nov 5, 2026 | HomeBox is a home inventory and organization system. Prior to 0.27.0, the POST /api/v1/users/login endpoint performs password-hash verification only when the submitted username matches an existing account, while unknown usernames return immediately. Although both paths return… | ||
| CVE-2026-73856 | Hig | 0.49 | 8.6 | 0.01 | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, src/transaction.cc compares a response Content-Type value against SecResponseBodyMimeType entries case-sensitively. A mixed-case response media… | ||
| CVE-2026-70660 | Med | 0.38 | — | 0.00 | Nov 5, 2026 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Prior to master-764-e22272e, the safetensors loader in src/model_io/safetensors_io.cpp trusts each tensor's data_offsets after… | ||
| CVE-2026-70659 | Hig | 0.44 | 7.8 | 0.00 | Nov 5, 2026 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and… | ||
| CVE-2026-61813 | Low | 0.17 | 3.7 | 0.00 | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, the HttpsClient::download function in src/utils/https_client.cc sets libcurl CURLOPT_SSL_VERIFYHOST to 1 instead of the strict value 2L.… | ||
| CVE-2026-123158 | Hig | 0.46 | 8.1 | 0.01 | Nov 5, 2026 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256… | ||
| CVE-2026-123125 | Med | 0.35 | 6.5 | 0.00 | Nov 5, 2026 | The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses are accepted as public, which can lead to Server-Side Request Forgery (SSRF) in Symfony versions prior to 5.4.56, 6.x… | ||
| CVE-2026-123096 | Med | 0.35 | 6.5 | 0.00 | Nov 5, 2026 | anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker/http package that allows malicious trackers to crash clients by returning unbounded responses. Attackers controlling an HTTP tracker in a torrent file or magnet link can return huge or… | ||
| CVE-2026-123095 | Hig | 0.42 | 7.5 | 0.00 | Nov 5, 2026 | mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass url_is_safe() to open file:// or… | ||
| CVE-2026-123094 | Med | 0.28 | 5.4 | 0.00 | Nov 5, 2026 | Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or email and share it… | ||
| CVE-2026-122330 | Med | 0.29 | 5.5 | 0.00 | Nov 5, 2026 | Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious… | ||
| CVE-2026-122329 | Hig | 0.44 | 7.8 | 0.00 | Nov 5, 2026 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory… | ||
| CVE-2026-122328 | Hig | 0.44 | 7.8 | 0.00 | Nov 5, 2026 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack… | ||
| CVE-2026-122327 | Med | 0.28 | 4.3 | 0.00 | Nov 5, 2026 | Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify shared catalog data because RolesGuard does not require Admin on song, track and video write routes. Attackers can send PUT requests to /songs/:idOrSlug,… | ||
| CVE-2026-122326 | Med | 0.27 | 5.3 | 0.01 | Nov 5, 2026 | Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an… | ||
| CVE-2026-122325 | Low | 0.20 | 3.1 | 0.00 | Nov 5, 2026 | fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead creation API that allows exhibitors to access other organizers' attendee data. Exhibitors with lead scanning enabled can submit another event's… | ||
| CVE-2026-122324 | Low | 0.13 | 3.1 | 0.00 | Nov 5, 2026 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbitrary expenseId values to expense.getExpenseDetails. Attackers who obtain an expense UUID, such as removed former participants,… | ||
| CVE-2026-122317 | Med | 0.28 | 4.3 | 0.00 | Nov 5, 2026 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email,… | ||
| CVE-2026-121139 | Hig | 0.44 | 7.8 | 0.00 | Nov 5, 2026 | The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST… | ||
| CVE-2026-119751 | Med | 0.34 | 5.3 | 0.00 | Nov 5, 2026 | Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve Content Egg product data from unpublished posts by calling the REST route POST /wp-json/content-egg/v1/render-blocks, whose… | ||
| CVE-2026-119345 | Hig | 0.40 | — | 0.00 | Nov 5, 2026 | Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that… | ||
| CVE-2026-119344 | Cri | 0.52 | — | 0.00 | Nov 5, 2026 | Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique… | ||
| CVE-2026-115740 | Med | 0.28 | 4.3 | 0.00 | Nov 5, 2026 | Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the… | ||
| CVE-2026-115739 | Med | 0.42 | 6.5 | 0.00 | Nov 5, 2026 | Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and evidence files. | ||
| CVE-2026-107891 | Hig | 0.46 | 8.1 | 0.01 | Nov 5, 2026 | musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes. | ||
| CVE-2026-104269 | Hig | 0.49 | 8.6 | 0.01 | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's multipart parser does not apply the RFC 2231 filename* parameter precedence used by common Go, Python, Node.js, and Java… | ||
| CVE-2026-103932 | Med | 0.31 | 5.8 | 0.00 | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2_match match-limit errors into an ordinary no-match result instead of… | ||
| CVE-2026-102615 | Hig | 0.42 | 7.6 | 0.00 | Nov 5, 2026 | HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a file according to the client-controlled multipart file.mimetype while retaining an HTML filename, and static/upload serves the resulting file as text/html with contentSecurityPolicy: false. An ordinary… | ||
| CVE-2026-102523 | Hig | 0.45 | 8.0 | 0.01 | Nov 5, 2026 | MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path… | ||
| CVE-2023-51466 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-51465 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47089 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47088 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47087 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47086 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47085 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47084 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47083 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47082 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47045 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
- risk 0.53cvss 8.1epss 0.00
A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which manages user permissions, fails to validate the resourceType field when a user creates a new policy. This allows an attacker to create a policy that applies…
- risk 0.53cvss 8.1epss 0.00
A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source identity and access management solution used to secure modern applications and services. The issue occurs when an attacker who belongs to multiple…
- risk 0.36cvss 6.6epss 0.00
A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved…
- risk 0.49cvss 7.5epss 0.01
A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution. The issue occurs because the server fails to validate theme names before using them as keys for an on-disk gzip cache. An unauthenticated attacker can exploit…
- risk 0.49cvss 7.5epss 0.01
A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs when the parser handles a specific element called AuthorityBinding within an authentication statement. Due to an incomplete fix for a previous…
- risk 0.49cvss 7.5epss 0.01
A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The issue occurs when the parser encounters unexpected elements within a security token's key information section, causing the processing thread to enter an…
- risk 0.49cvss 7.5epss 0.01
A flaw was found in the SAML XML processing component of Keycloak, an open-source identity and access management solution. The issue occurs when the server parses XML documents containing excessively long dateTime or duration values. Because these strings are not properly…
- risk 0.21cvss 4.3epss 0.00
Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 until 3.2.0, the GET /api/admin/users/{id}/calendar-heatmap route in server/src/controllers/user-admin.controller.ts uses the ordinary Permission.UserRead permission without an admin-route…
- risk 0.49cvss 7.5epss 0.00
A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to verify if an authenticator is valid for the current authentication flow when switching between the standard authentication path…
- risk 0.44cvss 7.8epss 0.00
ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6_optimize_filter_params.py, tools/1_analyze_raw_data.py, and tools/10_train_ml_model.py, load NPZ datasets with NumPy pickle support enabled through…
- risk 0.17cvss 3.7epss 0.00
HomeBox is a home inventory and organization system. Prior to 0.27.0, the POST /api/v1/users/login endpoint performs password-hash verification only when the submitted username matches an existing account, while unknown usernames return immediately. Although both paths return…
- risk 0.49cvss 8.6epss 0.01
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, src/transaction.cc compares a response Content-Type value against SecResponseBodyMimeType entries case-sensitively. A mixed-case response media…
- risk 0.38cvss —epss 0.00
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Prior to master-764-e22272e, the safetensors loader in src/model_io/safetensors_io.cpp trusts each tensor's data_offsets after…
- risk 0.44cvss 7.8epss 0.00
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and…
- risk 0.17cvss 3.7epss 0.00
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, the HttpsClient::download function in src/utils/https_client.cc sets libcurl CURLOPT_SSL_VERIFYHOST to 1 instead of the strict value 2L.…
- risk 0.46cvss 8.1epss 0.01
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256…
- risk 0.35cvss 6.5epss 0.00
The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses are accepted as public, which can lead to Server-Side Request Forgery (SSRF) in Symfony versions prior to 5.4.56, 6.x…
- risk 0.35cvss 6.5epss 0.00
anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker/http package that allows malicious trackers to crash clients by returning unbounded responses. Attackers controlling an HTTP tracker in a torrent file or magnet link can return huge or…
- risk 0.42cvss 7.5epss 0.00
mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass url_is_safe() to open file:// or…
- risk 0.28cvss 5.4epss 0.00
Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or email and share it…
- risk 0.29cvss 5.5epss 0.00
Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or blocksize values. Attackers can provide a malicious…
- risk 0.44cvss 7.8epss 0.00
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory…
- risk 0.44cvss 7.8epss 0.00
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack…
- risk 0.28cvss 4.3epss 0.00
Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify shared catalog data because RolesGuard does not require Admin on song, track and video write routes. Attackers can send PUT requests to /songs/:idOrSlug,…
- risk 0.27cvss 5.3epss 0.01
Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an…
- risk 0.20cvss 3.1epss 0.00
fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead creation API that allows exhibitors to access other organizers' attendee data. Exhibitors with lead scanning enabled can submit another event's…
- risk 0.13cvss 3.1epss 0.00
SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbitrary expenseId values to expense.getExpenseDetails. Attackers who obtain an expense UUID, such as removed former participants,…
- risk 0.28cvss 4.3epss 0.00
SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email,…
- risk 0.44cvss 7.8epss 0.00
The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST…
- risk 0.34cvss 5.3epss 0.00
Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve Content Egg product data from unpublished posts by calling the REST route POST /wp-json/content-egg/v1/render-blocks, whose…
- risk 0.40cvss —epss 0.00
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that…
- risk 0.52cvss —epss 0.00
Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique…
- risk 0.28cvss 4.3epss 0.00
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the…
- risk 0.42cvss 6.5epss 0.00
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and evidence files.
- risk 0.46cvss 8.1epss 0.01
musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes.
- risk 0.49cvss 8.6epss 0.01
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's multipart parser does not apply the RFC 2231 filename* parameter precedence used by common Go, Python, Node.js, and Java…
- risk 0.31cvss 5.8epss 0.00
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2_match match-limit errors into an ordinary no-match result instead of…
- risk 0.42cvss 7.6epss 0.00
HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a file according to the client-controlled multipart file.mimetype while retaining an HTML filename, and static/upload serves the resulting file as text/html with contentSecurityPolicy: false. An ordinary…
- risk 0.45cvss 8.0epss 0.01
MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path…
- CVE-2023-51466Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-51465Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47089Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47088Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47087Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47086Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47085Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47084Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47083Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47082Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47045Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05