| CVE-2026-73931 | 8.3 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73929 | 8.3 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-71095 | 8.3 | — | — | — | oracle / business intelligence | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Pl | 55d ago |
| CVE-2026-70770 | 8.3 | — | — | — | oracle / warehouse management | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operation | 55d ago |
| CVE-2026-62455 | 8.3 | — | — | — | oracle / siebel crm | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). | 55d ago |
| CVE-2026-61305 | 8.3 | — | — | — | oracle / bi publisher | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). | 55d ago |
| CVE-2026-71573 | 8.3 | — | — | — | joomla / joomla\! | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper imple | 55d ago |
| CVE-2026-49225 | 8.3 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 55d ago |
| CVE-2026-49224 | 8.3 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 55d ago |
| CVE-2026-49226 | 8.3 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 55d ago |
| CVE-2026-45733 | 8.3 | — | — | — | — | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowled | 55d ago |
| CVE-2026-9816 | 8.3 | — | — | — | mattermost / mattermost server | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fi | 56d ago |
| CVE-2026-19983 | 8.3 | — | — | — | — | A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. | 56d ago |
| CVE-2026-19979 | 8.3 | — | — | — | — | A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, | 56d ago |
| CVE-2026-16708 | 8.3 | — | — | — | ibm / db2 mirror for i | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to extern | 59d ago |
| CVE-2026-72970 | 8.3 | — | — | — | microsoft / edge chromium | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over | 59d ago |
| CVE-2026-17101 | 8.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive informati | 60d ago |
| CVE-2026-73618 | 8.3 | — | — | — | — | Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint whe | 60d ago |
| CVE-2026-13433 | 8.3 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code | 61d ago |
| CVE-2026-18235 | 8.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language com | 61d ago |
| CVE-2026-17095 | 8.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to un | 61d ago |
| CVE-2026-73292 | 8.3 | — | — | — | — | Semaphore UI is a web interface for managing DevOps tools. | 61d ago |
| CVE-2026-19557 | 8.3 | — | — | — | google / chrome | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compr | 62d ago |
| CVE-2026-66154 | 8.3 | — | — | — | — | An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application | 62d ago |
| CVE-2026-69119 | 8.3 | — | — | — | — | Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows a | 62d ago |
| CVE-2026-56179 | 8.3 | — | — | — | microsoft / windows 11 24h2 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform sp | 62d ago |
| CVE-2026-53415 | 8.3 | — | — | — | — | Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code ex | 62d ago |
| CVE-2026-53413 | 8.3 | — | — | — | — | Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting | 62d ago |
| CVE-2026-72768 | 8.3 | — | — | — | n8n / n8n | n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client | 62d ago |
| CVE-2026-68352 | 8.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE le | 63d ago |
| CVE-2026-68196 | 8.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length | 63d ago |
| CVE-2026-19177 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacke | 67d ago |
| CVE-2026-19173 | 8.3 | — | — | — | google / chrome | Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised | 67d ago |
| CVE-2026-19172 | 8.3 | — | — | — | google / chrome | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the | 67d ago |
| CVE-2026-19163 | 8.3 | — | — | — | google / chrome | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had comp | 67d ago |
| CVE-2026-19155 | 8.3 | — | — | — | google / chrome | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised | 67d ago |
| CVE-2026-19154 | 8.3 | — | — | — | google / chrome | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compr | 67d ago |
| CVE-2026-19152 | 8.3 | — | — | — | google / chrome | Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker w | 67d ago |
| CVE-2026-19148 | 8.3 | — | — | — | google / chrome | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had com | 67d ago |
| CVE-2026-19147 | 8.3 | — | — | — | google / chrome | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had comprom | 67d ago |
| CVE-2026-19141 | 8.3 | — | — | — | google / chrome | Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had | 67d ago |
| CVE-2026-19140 | 8.3 | — | — | — | google / chrome | Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the r | 67d ago |
| CVE-2026-19138 | 8.3 | — | — | — | google / chrome | Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had | 67d ago |
| CVE-2026-19137 | 8.3 | — | — | — | google / chrome | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had comp | 67d ago |
| CVE-2026-71242 | 8.3 | — | — | — | — | Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-notes / view-all-notes) with no company-owne | 68d ago |
| CVE-2026-71206 | 8.3 | — | — | — | — | Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the em | 68d ago |
| CVE-2026-55739 | 8.3 | — | — | — | — | Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer abil | 68d ago |
| CVE-2026-67331 | 8.3 | — | — | — | — | better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their cre | 72d ago |
| CVE-2026-67327 | 8.3 | — | — | — | — | better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0-beta.10) are vuln | 72d ago |
| CVE-2026-14980 | 8.3 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery w | 74d ago |
| CVE-2026-5219 | 8.3 | — | — | — | — | Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. | 74d ago |
| CVE-2026-22621 | 8.3 | — | — | — | — | Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware co | 74d ago |
| CVE-2026-47882 | 8.3 | — | — | — | — | When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Clou | 74d ago |
| CVE-2026-17723 | 8.3 | — | — | — | google / chrome | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compr | 74d ago |
| CVE-2026-17722 | 8.3 | — | — | — | google / chrome | Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who | 74d ago |
| CVE-2026-17663 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a rem | 74d ago |
| CVE-2026-17660 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote att | 74d ago |
| CVE-2026-17657 | 8.3 | — | — | — | google / chrome | Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised | 74d ago |
| CVE-2026-17653 | 8.3 | — | — | — | google / chrome | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the r | 74d ago |
| CVE-2026-17650 | 8.3 | — | — | — | google / chrome | Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromise | 74d ago |
