Archive
November 2026
Vulnerabilities first published in this month (UTC), newest first.
3,147 results · Clear filters · Feed
-
Medium 6.5
Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret …
-
Medium 5.7
The AVRCP browsing channel's L2CAP receive-buffer callback, browsing_avrcp_l2cap_alloc_buf() in subsys/bluetooth/host/c…
-
Medium 6.9
X.Org Server glamor Xv Image Size Integer Overflow
A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.
-
Medium 4.9
Dell PowerStore contains an authorization bypass vulnerability. An authenticated administrator could exploit this vulne…
-
Medium 5.5
Dell PowerStore contains an insecure-file-permissions vulnerability. A local low-privileged attacker could exploit this…
-
Medium 6.0
NULL pointer dereference when a response fragment is not acknowledged
P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relatio…
-
Medium 6.0
Fragment with another data representation releases an Application Relationship
P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data representation (endianness) than the first fragment of the call. The application is not told that the Applic…
-
Medium 6.0
RPC reject, fault and cancel PDUs abort an Application Relationship
P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes …
-
Medium 5.5
Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org xwayl…
-
Medium 6.5
WordPress Spectra plugin <= 2.20.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Stored XSS.This issue affects Spectra: from n/a through 2.20.5.
-
Medium 5.0
Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existi…
-
Medium 5.3
Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulner…
-
Medium 6.5
WordPress WooCommerce plugin 11.0.0-11.2.2 - Race Condition vulnerability
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic WooCommerce woocommerce allows Leveraging Race Conditions.This issue affects WooCommerce: from 11.0.0 through 11.2.2.
-
Medium 5.3
Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploi…
-
Medium 5.3
WordPress Brizy plugin <= 2.8.25 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25.
-
Medium 6.5
WordPress MapSVG plugin <= 9.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 9.0.4.
-
Medium 6.5
WordPress Royal Elementor Addons plugin <= 1.7.1070 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1070.
-
Medium 6.5
WordPress Gutenberg Blocks plugin <= 3.7.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6.
-
Medium 6.5
DoS vulnerability in JBL Flip 4
Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.
-
Medium 5.3
WordPress Product Feed PRO for WooCommerce plugin <= 13.5.8 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5…
-
Medium 6.5
WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.24.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation allows Stored XSS.This issue affects YITH WooCommerce Ajax Product Filter: from n/…
-
Medium 5.3
WordPress Spectra plugin <= 2.20.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.20.5.
-
Medium 5.3
WordPress Gutenberg Blocks plugin <= 3.7.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6.
-
Medium 4.6
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exp…
-
Medium 5.3
WordPress We’re Open! plugin <= 2.8 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open! opening-hours allows Code Injection.This issue affects We’re Open!: from n/a through 2.8.
-
Medium 6.9
X.Org Server XRes QueryClientIds Request Size Overflow
A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.
-
Medium 6.9
Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload f…
-
Medium 6.1
Zipline before 3.7.12 XSS via url parameter on login page
Zipline before 3.7.12 contains a cross-site scripting vulnerability in the login page that allows attackers to execute JavaScript by supplying an unvalidated url parameter. Attackers can craft a login link with a javascript: URI in the url parameter that exec…
-
Medium 6.7
Scapy before 2.7.0 Insecure Deserialization RCE via Session Files
Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s opt…
-
Medium 6.8
Cudy TR3000 before 2.5.42 SMT Message Forgery via Probe Request Vendor IE
Cudy TR3000 before 2.5.42 contains an insufficient verification of data authenticity vulnerability in the mt_wifi Smart Mesh Technology (SMT) onboarding, which protects messages only with an AES-CBC key derived from public values and a CRC32 check. Adjacent u…
-
Medium 5.9
Cudy TR3000 before 2.5.42 Stack Buffer Overflow via obuspa KeyPassphrase Getter
Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in an obuspa getter for the TR-098 WLANConfiguration KeyPassphrase parameter, which copies the stored value with strcpy() into a 4,096-byte stack buffer without a length check. A malicio…
-
Medium 6.5
NocoDB from 0.300.0 before 2026.04.4 Denial of Service via MetaService Logging
NocoDB from 0.300.0 before 2026.04.4 contains a denial of service vulnerability that allows authenticated users to crash the server by triggering an unhandled promise rejection in MetaService metadata logging. Attackers can send a request leaving a lookup con…
-
Medium 6.9
NocoDB before 2026.08.0 contains an IP address spoofing vulnerability that allows unauthenticated attackers to forge th…
-
Medium 6.5
NocoDB before 2026.09.1 Unauthenticated Information Disclosure via Aggregated Meta Endpoint
NocoDB before 2026.09.1 contains a missing authentication vulnerability in the aggregated meta info route of utils.controller.ts that exposes instance-wide metadata to anonymous callers. Unauthenticated attackers can request the endpoint to enumerate bases, u…
-
Medium 6.3
NocoDB before 2026.06.2 Stored XSS via AI Field Prompt Tooltip
NocoDB before 2026.06.2 contains a stored cross-site scripting vulnerability in PromptWithFields.vue that renders unescaped field references from AI field prompts as HTML in a tooltip. Attackers with the Creator role or above can store markup in a prompt's fi…
-
Medium 5.9
NocoDB before 2026.06.2 OAuth Refresh Token Rotation Race Condition
NocoDB before 2026.06.2 contains a race condition vulnerability in oauth-token.service.ts that allows attackers to reuse a refresh token by presenting it concurrently during non-atomic rotation. Attackers holding a captured refresh token can race the legitima…
-
Medium 5.1
NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values a…
-
Medium 6.9
NocoDB before 2026.06.2 contains an information disclosure vulnerability that allows unauthenticated attackers to retri…
-
Medium 6.5
NocoDB before 2026.07.0 Private Integration Credential Exposure via Base Integration Read
NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private i…
-
Medium 5.3
NocoDB before 2026.06.1 contains an information disclosure vulnerability in the profile update handler in users.service…