Archive
11 November 2026
Vulnerabilities first published on this day (UTC), newest first.
240 results · Clear filters · Feed
-
Medium 4.6
PAN-OS: Buffer Overflow Vulnerability
A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cloud…
-
Medium 5.7
PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama
A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly mi…
-
Medium 4.6
PAN-OS: Sensitive Information Disclosure Vulnerability
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Panorama…
-
Medium 4.3
Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lag…
-
Medium 5.4
Wallos 4.4.0 before 5.10.3 Stored XSS via sendnotifications.php
Wallos 4.4.0 before 5.10.3 contains a stored cross-site scripting vulnerability in endpoints/cronjobs/sendnotifications.php that allows registered users to inject scripts via unescaped notification service responses. Attackers can point their Mattermost webho…
-
Medium 5.3
SiYuan 3.7.0 before 3.8.10 Path Traversal File Write via MCP web_fetch
SiYuan 3.7.0 before 3.8.10 on Windows contains a path traversal vulnerability in kernel/util/webfetch.go that allows attackers to write files outside the import directory via backslash-encoded filenames. Attackers controlling a URL fetched by the MCP web_fetc…
-
Medium 4.2
Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayState
Social-auth-core 4.7.0 before 7.0.0 contains a login cross-site request forgery vulnerability in the SAML backend that restores sessions named in the unsigned RelayState parameter. Attackers can deliver their own valid IdP response and RelayState to a victim'…
-
Medium 5.9
A NULL pointer dereference in Node.js HTTP/2 lets an unauthenticated client crash the server, over both TLS and clearte…
-
Medium 6.8
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be r…
-
Medium 4.6
CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could tri…
-
Medium 6.2
Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages. CVE-2026-48615 established that a proxy…
-
Medium 5.9
An unauthenticated HTTP/2 client can exhaust Node.js server memory because inbound DATA queued on an undrained stream i…
-
Medium 6.9
iopress is a native HTTP server for Node.js with platform-specific async I/O. Prior to version 1.0.5, the chunked-trans…
-
Medium 4.2
Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA
A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with `server.addContext(host, {…
-
Medium 5.5
Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity…
-
Medium 6.3
REVA: Access to internal metadata
REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in the spaces of an authenticated user. This can lead to unwanted ways of interaction with the data. This issue has been patched in versions 2.40…
-
Medium 5.4
OpsTree REMS through 1.0.0 Stored XSS via Attachment Upload and Preview
OpsTree REMS through 1.0.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts by uploading attachments with spoofed text/html Content-Type. Attackers can upload HTML files named like test.html.pdf that r…
-
Medium 5.3
OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comme…
-
Medium 5.0
OpsTree REMS through 1.0.0 SSRF via Database Test Connection
OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows authenticated users to make the backend connect to arbitrary destinations through the database Test Connection feature. Attackers can set a database entry's host and p…
-
Medium 4.3
OpsTree REMS through 1.0.0 Reporter Spoofing via /api/v1/incidents
OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another user by supplying a client-controlled reporter field. Attackers can send crafted POST /api/v1/incidents or PAT…
-
Medium 4.3
OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and r…
-
Medium 5.9
A one-byte heap buffer overflow in Node.js HTTP/2 Alt-Svc handling lets a remote, unauthenticated attacker corrupt proc…
-
Medium 4.9CVE-2026-63505 Public exploit
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prio…
-
Medium 4.3
Probo: GraphQL Alias-Based Application Layer Denial of Service (DoS)
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prior to version 0.222.0, the GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. An attacker can s…
-
Medium 6.6
Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisionin…
-
Medium 5.3CVE-2026-64858 Scanner template
vulnerability-operator: IDOR exposing vulnerability reports via unauthenticated Report Handler
vulnerability-operator scans SBOMs and Images for vulnerabilities. Prior to version 0.28.16, an unauthenticated information-disclosure vulnerability exposes all vulnerability scan reports served by the operator. The /report/ HTTP endpoint mounts a raw http.Fi…
-
Medium 5.5
Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log Fi…
-
Medium 6.3
In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web …
-
Medium 5.4
A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier al…
-
Medium 4.3
An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to cre…
-
Medium 4.3
A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an att…
-
Medium 6.1
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier …
-
Medium 6.1
A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier al…
-
Medium 4.7
A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and …
-
Medium 4.7
A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier all…
-
Medium 6.1
A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier …
-
Medium 4.7
Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allows an unau…
-
Medium 6.1
A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an un…
-
Medium 5.4
An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager, …
-
Medium 4.3
An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restr…