| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-122317 | Med | 0.28 | 4.3 | 0.00 | Nov 5, 2026 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email,… | ||
| CVE-2026-121139 | Hig | 0.44 | 7.8 | 0.00 | Nov 5, 2026 | The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST… | ||
| CVE-2026-119751 | Med | 0.34 | 5.3 | 0.00 | Nov 5, 2026 | Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve Content Egg product data from unpublished posts by calling the REST route POST /wp-json/content-egg/v1/render-blocks, whose… | ||
| CVE-2026-119345 | Hig | 0.40 | — | 0.00 | Nov 5, 2026 | Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that… | ||
| CVE-2026-119344 | Cri | 0.52 | — | 0.00 | Nov 5, 2026 | Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique… | ||
| CVE-2026-115740 | Med | 0.28 | 4.3 | 0.00 | Nov 5, 2026 | Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the… | ||
| CVE-2026-115739 | Med | 0.42 | 6.5 | 0.00 | Nov 5, 2026 | Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and evidence files. | ||
| CVE-2026-107891 | Hig | 0.46 | 8.1 | 0.01 | Nov 5, 2026 | musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes. | ||
| CVE-2026-104269 | Hig | 0.49 | 8.6 | 0.01 | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's multipart parser does not apply the RFC 2231 filename* parameter precedence used by common Go, Python, Node.js, and Java… | ||
| CVE-2026-103932 | Med | 0.31 | 5.8 | 0.00 | Nov 5, 2026 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2_match match-limit errors into an ordinary no-match result instead of… | ||
| CVE-2026-102615 | Hig | 0.42 | 7.6 | 0.00 | Nov 5, 2026 | HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a file according to the client-controlled multipart file.mimetype while retaining an HTML filename, and static/upload serves the resulting file as text/html with contentSecurityPolicy: false. An ordinary… | ||
| CVE-2026-102523 | Hig | 0.45 | 8.0 | 0.01 | Nov 5, 2026 | MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path… | ||
| CVE-2023-51466 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-51465 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47089 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47088 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47087 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47086 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47085 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47084 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47083 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47082 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-47045 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44370 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44369 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44368 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44364 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44363 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44354 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-44349 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-38202 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-29493 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-26399 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-26365 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-26363 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-26362 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-26357 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-22270 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-22267 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-22255 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-22245 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-21623 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-21617 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-21602 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-21600 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2023-21580 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2022-44531 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2022-44530 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2022-44529 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 | ||
| CVE-2022-44528 | — | 0.00 | — | — | Nov 5, 2026 | Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05 |
- risk 0.28cvss 4.3epss 0.00
SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email,…
- risk 0.44cvss 7.8epss 0.00
The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST…
- risk 0.34cvss 5.3epss 0.00
Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve Content Egg product data from unpublished posts by calling the REST route POST /wp-json/content-egg/v1/render-blocks, whose…
- risk 0.40cvss —epss 0.00
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that…
- risk 0.52cvss —epss 0.00
Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique…
- risk 0.28cvss 4.3epss 0.00
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the…
- risk 0.42cvss 6.5epss 0.00
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and evidence files.
- risk 0.46cvss 8.1epss 0.01
musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes.
- risk 0.49cvss 8.6epss 0.01
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's multipart parser does not apply the RFC 2231 filename* parameter precedence used by common Go, Python, Node.js, and Java…
- risk 0.31cvss 5.8epss 0.00
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2_match match-limit errors into an ordinary no-match result instead of…
- risk 0.42cvss 7.6epss 0.00
HeyForm is an open-source form builder. Prior to 3.0.1, /api/upload accepts a file according to the client-controlled multipart file.mimetype while retaining an HTML filename, and static/upload serves the resulting file as text/html with contentSecurityPolicy: false. An ordinary…
- risk 0.45cvss 8.0epss 0.01
MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path…
- CVE-2023-51466Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-51465Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47089Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47088Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47087Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47086Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47085Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47084Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47083Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47082Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-47045Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44370Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44369Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44368Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44364Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44363Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44354Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-44349Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-38202Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-29493Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-26399Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-26365Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-26363Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-26362Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-26357Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-22270Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-22267Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-22255Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-22245Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-21623Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-21617Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-21602Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-21600Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2023-21580Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2022-44531Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2022-44530Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2022-44529Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2022-44528Nov 5, 2026risk 0.00cvss —epss —
Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05