Skip to content
OpenAdvisories

Archive

15 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /15
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13771
  14. 1465
  15. 1544
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-82663

    The Give - Peer-to-Peer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including…

    GiveWP Give - Peer-to-Peer Web / CMS
  • High 7.5
    CVE-2026-82568

    The Give - Peer-to-Peer plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort' parameter in all …

    GiveWP Give - Peer-to-Peer Web / CMS
  • High 7.3
    CVE-2026-129359

    Linux Foundation Magma interceptors.go hard-coded credentials

    A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be initiated …

    Linux Foundation Magma
  • High 8.8
    CVE-2026-129464

    Zr.Admin.NET commit 0ee1ab8 through eb9228a Path Traversal via DownloadFile

    Zr.Admin.NET commit 0ee1ab8 through commit eb9228a contains a path traversal vulnerability that allows any logged-in user to read arbitrary server files via the path parameter of /common/DownloadFile. Attackers can supply absolute paths or ../ sequences to re…

    izhaorui Zr.Admin.NET
  • High 8.8
    CVE-2026-129465

    Zr.Admin.NET commit af07ffc through eb9228a IDOR via /system/user/profile

    Zr.Admin.NET commit af07ffc through commit eb9228a contains an insecure direct object reference vulnerability in SysProfileController.UpdateProfile that allows any authenticated user to modify other accounts via UserId. Attackers can set the administrator's p…

    izhaorui Zr.Admin.NET