| CVE-2026-81692 | 7.5 | — | — | — | — | openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_sam | 63d ago |
| CVE-2026-81691 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, acc | 63d ago |
| CVE-2026-81689 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 | 63d ago |
| CVE-2026-81688 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header | 63d ago |
| CVE-2026-81678 | 7.5 | — | — | — | — | AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails t | 63d ago |
| CVE-2026-81335 | 7.5 | — | — | — | — | Baserow dispatches an Application Builder data source without acting on the result of its permission check. | 63d ago |
| CVE-2026-80212 | 7.5 | — | — | — | — | An issue was discovered in the resolv gem before 0.7.2 for Ruby. | 63d ago |
| CVE-2026-78002 | 7.5 | — | — | — | — | A flaw was found in rsyslog. | 63d ago |
| CVE-2026-5680 | 7.5 | — | — | — | — | A flaw was found in Undertow. | 63d ago |
| CVE-2026-30073 | 7.5 | — | — | — | — | An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial | 63d ago |
| CVE-2026-30072 | 7.5 | — | — | — | — | A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a Denial of Serv | 63d ago |
| CVE-2026-30071 | 7.5 | — | — | — | — | An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a c | 63d ago |
| CVE-2026-30070 | 7.5 | — | — | — | — | An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) | 63d ago |
| CVE-2026-30069 | 7.5 | — | — | — | — | A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause | 63d ago |
| CVE-2026-30068 | 7.5 | — | — | — | — | Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc v4.0.1 allows atta | 63d ago |
| CVE-2026-30067 | 7.5 | — | — | — | — | An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attack | 63d ago |
| CVE-2026-30064 | 7.5 | — | — | — | — | Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 allows attackers | 63d ago |
| CVE-2026-30063 | 7.5 | — | — | — | — | An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a | 63d ago |
| CVE-2026-30062 | 7.5 | — | — | — | — | An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted N | 63d ago |
| CVE-2026-30060 | 7.5 | — | — | — | — | An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing crafted SUCI data duri | 63d ago |
| CVE-2026-30059 | 7.5 | — | — | — | — | An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a | 63d ago |
| CVE-2026-30058 | 7.5 | — | — | — | — | Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Deni | 63d ago |
| CVE-2026-30057 | 7.5 | — | — | — | — | An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service | 63d ago |
| CVE-2026-30056 | 7.5 | — | — | — | — | A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Deni | 63d ago |
| CVE-2026-30051 | 7.5 | — | — | — | — | An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows attackers to c | 63d ago |
| CVE-2026-30050 | 7.5 | — | — | — | — | An issue in the ModifyAMFEventSubscriptionProcedure function (processor/event_exposure.go) of free5gc v4.1.0 allow | 63d ago |
| CVE-2026-30047 | 7.5 | — | — | — | — | A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows atta | 63d ago |
| CVE-2026-30046 | 7.5 | — | — | — | — | A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denia | 63d ago |
| CVE-2026-30045 | 7.5 | — | — | — | — | An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Deni | 63d ago |
| CVE-2026-26459 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a | 63d ago |
| CVE-2026-26457 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_dump_ | 63d ago |
| CVE-2026-26456 | 7.5 | — | — | — | — | A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e9 | 63d ago |
| CVE-2026-26453 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_serve | 63d ago |
| CVE-2026-26452 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a | 63d ago |
| CVE-2026-81575 | 7.5 | — | — | — | — | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, whi | 63d ago |
| CVE-2026-80433 | 7.5 | — | — | — | — | Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions. | 63d ago |
| CVE-2026-75005 | 7.5 | — | — | — | apache / apisix | Inefficient Algorithmic Complexity vulnerability in Apache APISIX. | 63d ago |
| CVE-2026-74848 | 7.5 | — | — | — | apache / apisix | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. | 63d ago |
| CVE-2026-78137 | 7.5 | — | — | — | — | The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its una | 63d ago |
| CVE-2026-47893 | 7.5 | — | — | — | vmware / spring framework | A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information | 63d ago |
| CVE-2026-47889 | 7.5 | — | — | — | — | A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSi | 63d ago |
| CVE-2026-47888 | 7.5 | — | — | — | — | A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. | 63d ago |
| CVE-2026-47886 | 7.5 | — | — | — | — | Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Deni | 63d ago |
| CVE-2026-47885 | 7.5 | — | — | — | — | The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is se | 63d ago |
| CVE-2026-19715 | 7.5 | — | — | — | — | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access to the debug l | 63d ago |
| CVE-2026-47852 | 7.5 | — | — | — | vmware / spring ai | A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model | 63d ago |
| CVE-2026-47851 | 7.5 | — | — | — | vmware / spring ai | Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion t | 63d ago |
| CVE-2026-75333 | 7.5 | — | — | — | — | yx-image-recognition v1.0 is vulnerable to Path Traversal. | 63d ago |
| CVE-2026-75328 | 7.5 | — | — | — | — | In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an a | 63d ago |
| CVE-2026-75415 | 7.5 | — | — | — | — | AntFlow V2.0.0 is vulnerable to Incorrect Access Control. | 63d ago |
| CVE-2026-75413 | 7.5 | — | — | — | — | DocSys V2.02.80 is vulnerable to Any File Download. | 63d ago |
| CVE-2025-61480 | 7.5 | — | — | — | — | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate att | 63d ago |
| CVE-2025-61479 | 7.5 | — | — | — | — | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate att | 63d ago |
| CVE-2025-61478 | 7.5 | — | — | — | — | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate att | 63d ago |
| CVE-2025-51675 | 7.5 | — | — | — | — | An issue was discovered in openRISC OR1200 commit 83ac6b. | 63d ago |
| CVE-2026-68863 | 7.5 | — | — | — | dell / powerprotect one | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. | 63d ago |
| CVE-2026-46369 | 7.5 | — | — | — | — | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. | 63d ago |
| CVE-2026-26449 | 7.5 | — | — | — | — | In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a nu | 63d ago |
| CVE-2026-26447 | 7.5 | — | — | — | — | Stomper 5e2741e is vulnerable to Use-After-Free. | 63d ago |
| CVE-2026-26446 | 7.5 | — | — | — | — | Stomper 5e2741e is vulnerable to Denial of Service. | 63d ago |
