CVEs published in November 2026
8,005 vulnerabilities, 689 critical, 12 exploited.
heifer-isobmffcrates.ioMemory exhaustion when parsing a crafted `iloc` box6.5 Medium- debian aptAPT RCE via hard link reuse7.7 High
- snowflake libsnowflakeclient, php pdo driver +1 moreBuffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver6.6 Medium
- mobile builder builder, rnlab mobile builder +1 moreMobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters8.8 High
- easywpstuff remove google fonts – disable, block, or replace with bunny fonts for gdpr complianceRemove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer7.2 High
- snowflake connector for .net, connector for python, go driver +7 more +9 moreMissing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers6.5 Medium
- apache openofficeApache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption5.8 Medium
- apache openofficeApache OpenOffice: Local file inclusion via GStreamer plugin5.5 Medium
- apache openofficeApache OpenOffice: Out-of-bounds write when importing encrypted PDF files7.3 High
- apache openofficeApache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables3.3 Low
- apache openofficeApache OpenOffice: Out of bounds memory access during WMF import7.3 High
- apache openofficeApache OpenOffice: Stack overflow in CFF hint handling7.3 High
- apache openofficeApache OpenOffice: Local file inclusion via SQL provider and flat file database references5.5 Medium
- apache openofficeApache OpenOffice: Out-of-bounds write when importing encrypted PDF files7.3 High
- apache openofficeApache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability7.3 High
- apache openofficeApache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader7.3 High
- apache openofficeApache OpenOffice: Uncontrolled search path element vulnerability in Windows installer7.8 High
- apache openofficeApache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.1.9 Low
- apache software foundation zookeeperApache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling7.1 High
- apache software foundation zookeeperApache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable8.7 High
- apache software foundation zookeeperApache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread8.7 High
- apache software foundation zookeeperApache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID8.6 High
- apache software foundation zookeeperApache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation6.0 Medium
- apache software foundation activemqApache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection6.5 Medium
- apache software foundation activemq nms openwire client libraryApache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)7.5 High
- apache software foundation activemq broker, activemq +1 moreApache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection6.5 Medium
- apache software foundation activemq, activemq runtime config +1 moreApache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation8.1 High
- apache software foundation activemq, activemq kahadb +1 moreApache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal7.5 High
- apache software foundation activemq broker, activemq +1 moreApache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM6.5 Medium
- sogou input methodInsecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution8.9 High
- coupa total spend management platformMultiple vulnerabilities in Coupa’s Total Spend Management Platform5.1 Medium
- coupa total spend management platformMultiple vulnerabilities in Coupa’s Total Spend Management Platform7.3 High
- coupa total spend management platformMultiple vulnerabilities in Coupa’s Total Spend Management Platform5.1 Medium
- coupa total spend management platformMultiple vulnerabilities in Coupa’s Total Spend Management Platform8.4 High
- carazo import and export users and customersImport and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save8.8 High
- wingerspeed slim jetpackSlim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field7.2 High
- elliotvs simple captcha with cloudflare turnstileSimple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- phoenix contact plcnext engineerPath traversal in plug-in deployment8.6 High
- phoenix contact plcnext engineerSigned plug-in validation bypass8.6 High
- phoenix contact plcnext engineerMissing GSDX SignatureValue verification6.9 Medium
- i.r.i.s s.a. irispowerscanIRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution6.1 Medium
- i.r.i.s s.a. irispowerscanIRISPowerscan Insecure default privilege assignment for installation account7.2 High
- i.r.i.s s.a. irispowerscanIRISPowerscan Default accounts with predictable credentials7.2 High
- seppmail ag secure email gateway (seg)Empty initial password permits GINA account takeover8.3 High
- seppmail ag secure email gateway (seg)LDAP wildcard injection exposes GINA recipient accounts6.9 Medium
- seppmail ag secure email gateway (seg)Pre-authentication upload parsing permits resource exhaustion8.7 High
- seppmail ag secure email gateway (seg)Forged LFT metadata permits arbitrary file read and deletion9.2 Critical
- seppmail ag secure email gateway (seg)Code execution through double evaluation in address replacement rules9.2 Critical
- tubitak bilgem software technologies research institute imzagerPath Traversal in TÜBİTAK BİLGEM's İmzager3.3 Low
- tubitak bilgem software technologies research institute imzagerXXE in TÜBİTAK BİLGEM's İmzager3.3 Low
- Show moreLoading…