Skip to content
OpenAdvisories

Archive

10 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /10
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13692
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-67176 Public exploit

    Chargemap open redirect

    Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17.

    Chargemap Chargemap
  • Medium 4.6
    CVE-2026-67175 Public exploit

    Chargemap stored XSS

    Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17.

    Chargemap Chargemap
  • Medium 4.9
    CVE-2026-119905 Public exploit

    Windows DNS Spoofing Vulnerability

    Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  • Medium 6.5
    CVE-2026-124194 Exploited Public exploit

    Microsoft Outlook Spoofing Vulnerability

    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
    KEV Nov 10, 2026
  • Medium 5.9
    CVE-2026-125753 Public exploit

    ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints

    ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in DefaultBlobFilePathCalculator that allows unauthenticated attackers to access files outside the blob container. Attackers can send %5C-encoded ba…

    abpframework abp