| CVE-2026-51619 | 7.5 | — | — | — | — | Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticat | 61d ago |
| CVE-2026-51618 | 7.5 | — | — | — | — | Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated | 61d ago |
| CVE-2026-51617 | 7.5 | — | — | — | — | Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticat | 61d ago |
| CVE-2026-51616 | 7.5 | — | — | — | — | Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a | 61d ago |
| CVE-2026-51615 | 7.5 | — | — | — | — | Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att | 61d ago |
| CVE-2026-81767 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions. | 62d ago |
| CVE-2026-81285 | 7.5 | — | — | — | — | Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions. | 62d ago |
| CVE-2026-56854 | 7.5 | — | — | — | — | The source-address critical option in the Permissions returned by an authentication callback was only enforced for | 62d ago |
| CVE-2026-38638 | 7.5 | — | — | — | — | An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of | 62d ago |
| CVE-2026-38636 | 7.5 | — | — | — | — | An issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of | 62d ago |
| CVE-2026-37736 | 7.5 | — | — | — | — | An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Deni | 62d ago |
| CVE-2026-37237 | 7.5 | — | — | — | — | vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion. | 62d ago |
| CVE-2026-82261 | 7.5 | — | — | — | svelte / sveltekit | SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions and form enabled conta | 62d ago |
| CVE-2026-82260 | 7.5 | — | — | — | svelte / sveltekit | SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFu | 62d ago |
| CVE-2026-82259 | 7.5 | — | — | — | svelte / sveltekit | SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the e | 62d ago |
| CVE-2026-82254 | 7.5 | — | — | — | — | gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacke | 62d ago |
| CVE-2026-82253 | 7.5 | — | — | — | — | gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. | 62d ago |
| CVE-2026-82252 | 7.5 | — | — | — | — | gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject o | 62d ago |
| CVE-2026-82251 | 7.5 | — | — | — | — | gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal w | 62d ago |
| CVE-2026-82247 | 7.5 | — | — | — | — | gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' | 62d ago |
| CVE-2026-42391 | 7.5 | — | — | — | — | An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, | 62d ago |
| CVE-2026-33605 | 7.5 | — | — | — | — | An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before au | 62d ago |
| CVE-2026-27852 | 7.5 | — | — | — | — | An attacker that can send mail to a user can craft a message whose headers contain a very large number of email ad | 62d ago |
| CVE-2026-80720 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ | 62d ago |
| CVE-2026-80717 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter | 62d ago |
| CVE-2026-80707 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new | 62d ago |
| CVE-2026-80691 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL ch | 62d ago |
| CVE-2026-80646 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __i | 62d ago |
| CVE-2026-80637 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory acce | 62d ago |
| CVE-2026-80631 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that ove | 62d ago |
| CVE-2026-80614 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in ema | 62d ago |
| CVE-2026-5097 | 7.5 | — | — | — | — | The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up | 62d ago |
| CVE-2026-19084 | 7.5 | — | — | — | — | The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featu | 62d ago |
| CVE-2026-18983 | 7.5 | — | — | — | — | The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in al | 62d ago |
| CVE-2026-76945 | 7.5 | — | — | — | — | The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation | 62d ago |
| CVE-2026-76940 | 7.5 | — | — | — | — | The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lock | 62d ago |
| CVE-2026-75813 | 7.5 | — | — | — | — | Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to a | 62d ago |
| CVE-2026-75418 | 7.5 | — | — | — | — | A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. | 62d ago |
| CVE-2026-73809 | 7.5 | — | — | — | — | A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. | 62d ago |
| CVE-2026-67560 | 7.5 | — | — | — | — | Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU | 62d ago |
| CVE-2026-38350 | 7.5 | — | — | — | — | An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allow | 62d ago |
| CVE-2026-38349 | 7.5 | — | — | — | — | An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows a | 62d ago |
| CVE-2026-38348 | 7.5 | — | — | — | — | An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a | 62d ago |
| CVE-2026-38347 | 7.5 | — | — | — | — | A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a21 | 62d ago |
| CVE-2026-38346 | 7.5 | — | — | — | — | An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows a | 62d ago |
| CVE-2026-38344 | 7.5 | — | — | — | — | A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e | 62d ago |
| CVE-2026-77438 | 7.5 | — | — | — | — | Trilium is an open-source hierarchical note-taking application. | 62d ago |
| CVE-2026-76640 | 7.5 | — | — | — | — | Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi pr | 62d ago |
| CVE-2026-59289 | 7.5 | — | — | — | vmware / spring for graphql | Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the clie | 62d ago |
| CVE-2026-59282 | 7.5 | — | — | — | vmware / spring framework | Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths | 62d ago |
| CVE-2026-37198 | 7.5 | — | — | — | — | An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via | 62d ago |
| CVE-2026-37012 | 7.5 | — | — | — | — | A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive u | 62d ago |
| CVE-2026-81722 | 7.5 | — | — | — | nltk / nltk | nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial o | 63d ago |
| CVE-2026-81721 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers | 63d ago |
| CVE-2026-81718 | 7.5 | — | — | — | — | openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to p | 63d ago |
| CVE-2026-81705 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is suppl | 63d ago |
| CVE-2026-81704 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.Encry | 63d ago |
| CVE-2026-81699 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, al | 63d ago |
| CVE-2026-81698 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed | 63d ago |
| CVE-2026-81693 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. | 63d ago |
