Recently updated CVEs

Nov 2, 2026 UTC

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.

Nov 2, 2026 UTC

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

Nov 2, 2026 UTC

Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Nov 2, 2026 UTC

The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing unauthenticated attackers to forge a payment confirmation and mark any order as …

Nov 2, 2026 UTC

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Nov 2, 2026 UTC

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

Nov 2, 2026 UTC

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

Nov 2, 2026 UTC

Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Nov 2, 2026 UTC

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

Nov 2, 2026 UTC

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Nov 2, 2026 UTC

UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

Nov 2, 2026 UTC

Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

Nov 2, 2026 UTC

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Return Refund and Exchange For WooCommerce: from n/a through 4.6.4.

Nov 2, 2026 UTC

Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Nov 2, 2026 UTC

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.