Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_rustsec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_android
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_linux
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulncheck_kev
vulnrichment
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| cve-2026-111357 | EUVD-2026-102437 | HIGH | 7.0 | cvelistv5 | Oct 31, 2026, 3:56:17 AM |
| cve-2026-118527 | EUVD-2026-115872 | MEDIUM | 4.3 | cvelistv5 | Nov 3, 2026, 3:32:56 PM |
| cve-2026-119977 | EUVD-2026-114575 | HIGH | 8.1 | cvelistv5 | Nov 4, 2026, 4:56:31 AM |
| cve-2024-27834 | EUVD-2024-25027 | MEDIUM | 5.5 | cvelistv5 | Nov 5, 2026, 4:56:43 AM |
| cve-2026-111357 | EUVD-2026-102437 | HIGH | 7.0 | cvelistv5 | Oct 31, 2026, 3:56:17 AM |
| cve-2026-118527 | EUVD-2026-115872 | MEDIUM | 4.3 | cvelistv5 | Nov 3, 2026, 3:32:56 PM |
| cve-2026-119977 | EUVD-2026-114575 | HIGH | 8.1 | cvelistv5 | Nov 4, 2026, 4:56:31 AM |
| cve-2024-27834 | EUVD-2024-25027 | MEDIUM | 5.5 | cvelistv5 | Nov 5, 2026, 4:56:43 AM |
| cve-2026-115732 | CVE-2026-115732 | CRITICAL | 9.0 | cvelistv5 | |
| cve-2026-111357 | EUVD-2026-102437 | HIGH | 7.0 | cvelistv5 | Oct 31, 2026, 3:56:17 AM |
| cve-2026-118527 | EUVD-2026-115872 | MEDIUM | 4.3 | cvelistv5 | Nov 3, 2026, 3:32:56 PM |
| cve-2026-119977 | EUVD-2026-114575 | HIGH | 8.1 | cvelistv5 | Nov 4, 2026, 4:56:31 AM |
| cve-2024-27834 | EUVD-2024-25027 | MEDIUM | 5.5 | cvelistv5 | Nov 5, 2026, 4:56:43 AM |
| cve-2026-84161 | Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics | MEDIUM | 4.9 | cvelistv5 | 2026-11-06 |
| cve-2025-52970 | Fortinet FortiWeb Improper Handling of Parameters | HIGH | cvelistv5 | 2025-09-04 | |
| cve-2026-84164 | Stored XSS in the static HTML report export, because json.dumps does not escape the markup character | UNKNOWN | cvelistv5 | 2026-11-06 | |
| cve-2026-94257 | SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset | HIGH | 8.1 | cvelistv5 | 2026-10-13 |
| cve-2026-115701 | Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion | HIGH | 8.2 | cvelistv5 | 2026-11-06 |
| cve-2026-109081 | Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint | MEDIUM | 6.8 | cvelistv5 | 2026-11-06 |
| cve-2026-107889 | Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypass | MEDIUM | 5.5 | cvelistv5 | 2026-10-13 |
| cve-2026-107623 | Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation | MEDIUM | 4.3 | cvelistv5 | 2026-10-08 |
| cve-2026-113431 | Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion | HIGH | 8.7 | cvelistv5 | 2026-11-06 |
| cve-2026-107124 | Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover | MEDIUM | 6.4 | cvelistv5 | 2026-11-06 |
| cve-2026-123337 | In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility | LOW | 3.1 | cvelistv5 | 2026-11-06 |
| cve-2026-107121 | Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade | MEDIUM | 6.5 | cvelistv5 | 2026-10-07 |
| cve-2026-123336 | In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion | LOW | 3.1 | cvelistv5 | 2026-11-06 |
| cve-2026-123335 | In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection | LOW | 3.5 | cvelistv5 | 2026-11-06 |
| cve-2026-123334 | In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project | LOW | 3.8 | cvelistv5 | 2026-11-06 |
| cve-2026-123333 | In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints | LOW | 3.8 | cvelistv5 | 2026-11-06 |
| cve-2026-123332 | In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations | MEDIUM | 4.7 | cvelistv5 | 2026-11-06 |