CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.5.1 Medium
- am system alo suiteClickjacking vulnerability in the Alosuite web application.5.1 Medium
- am system alo suiteVulnerability due to a lack of request limits in Alosuite’s password recovery functionality.6.9 Medium
- am system alo suiteInadequate authorization vulnerability in Alosuite’s user invitation functionality8.6 High
- am system alo suiteDirect Object Reference (IDOR) vulnerability in Alosuite6.9 Medium
astral-tokio-tarcrates.io`astral-tokio-tar` is unmaintainedNo scoresurrealdb-corecrates.ioData race and double free via unsound `Send`/`Sync` in `reblessive`7.8 Highsurrealkvcrates.ioOut-of-bounds read when decoding internal keys shorter than 16 bytes7.9 High- linuxsched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs7.8 High
mobius1-selectrRoot,@rootio/mobius1-selectrRoot +1 moreAIKIDO-2024-10147 in mobius1-selectr - Patched by RootNo score- linuxdrm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionNo score
- linuxntfs: fix resident conversion in ntfs_new_attr_flagsNo score
- linuxsoc/tegra: pmc: Fix uninitialised clock rateNo score
- linuxx86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()No score
- linuxgpio: shared: gracefully handle no-device lookup of shared GPIOsNo score
- linuxdm cache: fix issue with background work lockingNo score
- linuxio_uring/io-wq: don't hide a link from cancellationsNo score
- linuxio_uring: don't flood a cancelling task with task_workNo score
- linuxio_uring/cancel: rearm local work wake up before sleepNo score
- linuxDrivers: hv: Avoid infinite retry loop in init_vp_index()No score
- linuxprintk: Postpone kthread startupNo score
- linuxpid_namespace: make zap_pid_ns_processes() freezableNo score
- linuxi2c: xiic: restore non-managed runtime PM to fix clk WARN floodNo score
- linuxtracing: Do not initialize tracefs work if tracing is disabledNo score
- linuxtipc: protect node reset trace dump with node lock8.1 High
- linuxKEYS: Fix key_reject_and_link() race with keyring restrictionNo score
- linuxpid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperNo score
- apache software foundation hertzbeatApache HertzBeat: incomplete XPath expression validation in aliasFields6.5 Medium
- typo3 extension "mail"Information Disclosure in extension "Mail" (mail)6.9 Medium
- typo3 extension "mail"Open Redirection in extension "Mail" (mail)5.3 Medium
- typo3 extension "mail"Broken Access Control in extension "Mail" (mail)5.3 Medium
- typo3 extension "mail"Server-Side Request Forgery in extension "Mail" (mail)5.3 Medium
- typo3 extension "mail"Broken Access Control in extension "Mail" (mail)7.1 High
- typo3 extension "mail"Cross-Site Scripting in extension "Mail" (mail)5.1 Medium
- typo3 extension "frontend user registration"Broken Access Control in extension "Frontend User Registration" (sf_register)8.8 High
- zohocorp manageengine key manager plusCommand injection vulnerability8.1 High
- vivo bluelm copilotImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the...5.1 Medium
- gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreGst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags6.5 Medium
- zohocorp manageengine key manager plusImproper access control vulnerability7.1 High
- apache software foundation oozieApache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership6.5 Medium
- apache jcloudsApache JClouds: XML External Entity (XXE) in provider-response parsing7.5 High
- eclipse foundation mnestixMissing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering8.8 High
- zohocorp manageengine key manager plusImproper access control vulnerability7.1 High
- Show moreLoading…