| CVE-2026-32845 | 8.4 | — | — | — | — | cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when valid | 203d ago |
| CVE-2019-25619 | 8.4 | — | — | — | ftpshell / ftpshell server | FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows loca | 204d ago |
| CVE-2019-25615 | 8.4 | — | — | — | — | Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows loc | 204d ago |
| CVE-2019-25611 | 8.4 | — | — | — | — | MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attacker | 204d ago |
| CVE-2019-25609 | 8.4 | — | — | — | — | JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuratio | 204d ago |
| CVE-2019-25608 | 8.4 | — | — | — | — | Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbi | 204d ago |
| CVE-2019-25607 | 8.4 | — | — | — | — | Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attac | 204d ago |
| CVE-2019-25604 | 8.4 | — | — | — | — | DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows l | 204d ago |
| CVE-2019-25603 | 8.4 | — | — | — | — | TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attac | 204d ago |
| CVE-2026-28520 | 8.4 | — | — | — | tuya / arduino-tuyaopen | arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti compon | 210d ago |
| CVE-2026-28793 | 8.4 | — | — | — | ssw / tinacms\/cli | Tina is a headless content management system. | 214d ago |
| CVE-2019-25483 | 8.4 | — | — | — | — | Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows lo | 215d ago |
| CVE-2019-25467 | 8.4 | — | — | — | — | Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local | 215d ago |
| CVE-2019-25466 | 8.4 | — | — | — | — | Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that | 215d ago |
| CVE-2026-52771 | 8.3 | — | — | — | — | YesWiki is a wiki system written in PHP. | 37d ago |
| CVE-2026-52769 | 8.3 | — | — | — | — | YesWiki is a wiki system written in PHP. | 37d ago |
| CVE-2026-85048 | 8.3 | — | — | — | — | Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromise | 39d ago |
| CVE-2026-85212 | 8.3 | — | — | — | — | CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that re | 39d ago |
| CVE-2026-82404 | 8.3 | — | — | — | — | TOON is a compact, human-readable serialization of JSON data for LLM prompts. | 40d ago |
| CVE-2026-45730 | 8.3 | — | — | — | — | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. | 40d ago |
| CVE-2026-77180 | 8.3 | — | — | — | — | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the con | 40d ago |
| CVE-2026-84351 | 8.3 | — | — | — | google / chrome | Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had com | 40d ago |
| CVE-2026-84349 | 8.3 | — | — | — | google / chrome | Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised th | 40d ago |
| CVE-2026-84335 | 8.3 | — | — | — | google / chrome | Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had comp | 40d ago |
| CVE-2026-73780 | 8.3 | — | — | — | hpe / arubaos-cx | A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross- | 41d ago |
| CVE-2026-73709 | 8.3 | — | — | — | arubanetworks / fabric composer | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticate | 41d ago |
| CVE-2026-73708 | 8.3 | — | — | — | arubanetworks / fabric composer | A business logic vulnerability exists in the API of HPE Networking Fabric Composer. | 41d ago |
| CVE-2026-63137 | 8.3 | — | — | — | elastic / kibana | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured | 41d ago |
| CVE-2026-8712 | 8.3 | — | — | — | — | Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers wi | 41d ago |
| CVE-2026-84115 | 8.3 | — | — | — | — | A vulnerability was found in Cleo Harmony up to 5.8.1.10. | 41d ago |
| CVE-2026-82549 | 8.3 | — | — | — | — | A vulnerability was identified in Linux Foundation Magma 1.9.0. | 43d ago |
| CVE-2026-82021 | 8.3 | — | — | — | — | Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a | 45d ago |
| CVE-2026-38820 | 8.3 | — | — | — | — | openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through t | 45d ago |
| CVE-2026-79912 | 8.3 | — | — | — | — | A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. | 47d ago |
| CVE-2026-79292 | 8.3 | — | — | — | google / chrome | Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromis | 48d ago |
| CVE-2026-79256 | 8.3 | — | — | — | google / chrome | Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote | 48d ago |
| CVE-2026-79247 | 8.3 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who h | 48d ago |
| CVE-2026-79224 | 8.3 | — | — | — | google / chrome | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised | 48d ago |
| CVE-2026-79218 | 8.3 | — | — | — | google / chrome | Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compr | 48d ago |
| CVE-2026-79210 | 8.3 | — | — | — | google / chrome | Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had co | 48d ago |
| CVE-2026-79175 | 8.3 | — | — | — | google / chrome | Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker wh | 48d ago |
| CVE-2026-79155 | 8.3 | — | — | — | google / chrome | Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised | 48d ago |
| CVE-2026-79132 | 8.3 | — | — | — | google / chrome | Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker | 48d ago |
| CVE-2026-79121 | 8.3 | — | — | — | google / chrome | Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had | 48d ago |
| CVE-2026-79109 | 8.3 | — | — | — | google / chrome | Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had co | 48d ago |
| CVE-2026-79071 | 8.3 | — | — | — | google / chrome | Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the re | 48d ago |
| CVE-2026-79054 | 8.3 | — | — | — | google / chrome | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised | 48d ago |
| CVE-2026-79008 | 8.3 | — | — | — | google / chrome | Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker w | 48d ago |
| CVE-2026-78999 | 8.3 | — | — | — | google / chrome | Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who | 48d ago |
| CVE-2026-78983 | 8.3 | — | — | — | google / chrome | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the | 48d ago |
| CVE-2026-78952 | 8.3 | — | — | — | google / chrome | Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker wh | 48d ago |
| CVE-2026-78934 | 8.3 | — | — | — | google / chrome | Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social en | 48d ago |
| CVE-2026-78911 | 8.3 | — | — | — | google / chrome | Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromis | 48d ago |
| CVE-2026-17006 | 8.3 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a hea | 52d ago |
| CVE-2026-76394 | 8.3 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk r | 53d ago |
| CVE-2026-76391 | 8.3 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run | 53d ago |
| CVE-2026-18848 | 8.3 | — | — | — | ibm / power system e1080 \(9080-hex\) firmware | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu | 54d ago |
| CVE-2026-52877 | 8.3 | — | — | — | — | Streambert is a cross-platform Electron Desktop App to stream and download video content. | 54d ago |
| CVE-2026-76046 | 8.3 | — | — | — | google / chrome | Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had | 55d ago |
| CVE-2026-76044 | 8.3 | — | — | — | google / chrome | Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the r | 55d ago |
