CVE ID :CVE-2026-91898 Published : Nov. 2, 2026, 8:18 p.m. | 49 minutes ago Description :Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially…
CVE ID :CVE-2026-28588 Published : Nov. 2, 2026, 8:17 p.m. | 49 minutes ago Description :In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could lead to local…
CVE ID :CVE-2026-119737 Published : Nov. 2, 2026, 8:17 p.m. | 49 minutes ago Description :The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local…
CVE ID :CVE-2026-119731 Published : Nov. 2, 2026, 6:54 p.m. | 12 minutes ago Description :Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source…
CVE ID :CVE-2026-105604 Published : Nov. 2, 2026, 6:27 p.m. | 39 minutes ago Description :Joomla Extension – dj-extensions.com – Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 – The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in…
CVE ID :CVE-2026-105603 Published : Nov. 2, 2026, 6:25 p.m. | 41 minutes ago Description :Joomla Extension – dj-extensions.com – Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 – The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading…
CVE ID :CVE-2026-119085 Published : Nov. 2, 2026, 6:18 p.m. | 47 minutes ago Description :Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third…
CVE ID :CVE-2026-111048 Published : Nov. 2, 2026, 6:18 p.m. | 47 minutes ago Description :FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/note_create endpoint stores the note parameter without sanitization in the support_ticket_note table,…
CVE ID :CVE-2026-120240 Published : Nov. 1, 2026, 7:16 p.m. | 1 hour, 46 minutes ago Description :A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler.…
CVE ID :CVE-2026-120238 Published : Nov. 1, 2026, 6:17 p.m. | 45 minutes ago Description :A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of…