| CVE-2026-74795 | 7.5 | — | — | — | — | Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. | 74d ago |
| CVE-2026-74794 | 7.5 | — | — | — | — | Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimi | 74d ago |
| CVE-2026-74792 | 7.5 | — | — | — | — | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initiali | 74d ago |
| CVE-2026-74789 | 7.5 | — | — | — | — | Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not t | 74d ago |
| CVE-2026-74788 | 7.5 | — | — | — | — | Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the | 74d ago |
| CVE-2026-74787 | 7.5 | — | — | — | — | Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that | 74d ago |
| CVE-2026-74783 | 7.5 | — | — | — | — | Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursi | 74d ago |
| CVE-2026-73062 | 7.5 | — | — | — | — | Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operato | 74d ago |
| CVE-2026-73060 | 7.5 | — | — | — | — | Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply op | 74d ago |
| CVE-2026-73057 | 7.5 | — | — | — | — | stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to caus | 74d ago |
| CVE-2024-58375 | 7.5 | — | — | — | — | OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opte | 74d ago |
| CVE-2026-17087 | 7.5 | — | — | — | — | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authoriz | 74d ago |
| CVE-2026-19728 | 7.5 | — | — | — | — | The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the request | 74d ago |
| CVE-2026-19717 | 7.5 | — | — | — | — | The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in | 74d ago |
| CVE-2026-73054 | 7.5 | — | — | — | — | SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by d | 74d ago |
| CVE-2026-73045 | 7.5 | — | — | — | — | SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the aut | 74d ago |
| CVE-2026-19474 | 7.5 | — | — | — | fastify / fastify-multipart | @fastify/multipart is a multipart form-data parser for Fastify. | 75d ago |
| CVE-2026-18549 | 7.5 | — | — | — | fastify / fastify-multipart | @fastify/multipart is a multipart form-data parser for Fastify. | 75d ago |
| CVE-2026-74576 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free p | 75d ago |
| CVE-2026-74572 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock between metadata wr | 75d ago |
| CVE-2026-74557 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the S | 75d ago |
| CVE-2026-74550 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when pee | 75d ago |
| CVE-2026-74523 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock | 75d ago |
| CVE-2026-73635 | 7.5 | — | — | — | apache / struts | Allocation of resources without limits or throttling vulnerability in Apache Struts. | 75d ago |
| CVE-2026-73634 | 7.5 | — | — | — | apache / struts | Uncontrolled resource consumption vulnerability in Apache Struts. | 75d ago |
| CVE-2026-15142 | 7.5 | — | — | — | — | The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and | 75d ago |
| CVE-2026-74435 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc_verify_data ensure rx_dec_buffer | 75d ago |
| CVE-2026-74431 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpc_re | 75d ago |
| CVE-2026-74430 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpc_input_ | 75d ago |
| CVE-2026-74429 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet bef | 75d ago |
| CVE-2026-74425 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests wit | 75d ago |
| CVE-2026-74396 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate | 75d ago |
| CVE-2026-74385 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set | 75d ago |
| CVE-2026-74374 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with | 75d ago |
| CVE-2026-74321 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __bt | 75d ago |
| CVE-2026-74316 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked | 75d ago |
| CVE-2026-74282 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_AC | 75d ago |
| CVE-2026-74281 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer | 75d ago |
| CVE-2026-72502 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoi | 75d ago |
| CVE-2026-72465 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant afte | 75d ago |
| CVE-2026-72464 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed | 75d ago |
| CVE-2026-72438 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier refe | 75d ago |
| CVE-2026-72418 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit dro | 75d ago |
| CVE-2026-72409 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on res | 75d ago |
| CVE-2026-72378 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() | 75d ago |
| CVE-2026-72374 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to p | 75d ago |
| CVE-2026-72373 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_bre | 75d ago |
| CVE-2026-72356 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in | 75d ago |
| CVE-2026-72330 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_ | 75d ago |
| CVE-2026-72254 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on t | 75d ago |
| CVE-2026-72253 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst( | 75d ago |
| CVE-2026-72247 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison i | 75d ago |
| CVE-2026-72242 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinu | 75d ago |
| CVE-2026-72231 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pe | 75d ago |
| CVE-2026-72203 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ntfs: skip extent mft records in writeback to | 75d ago |
| CVE-2026-72202 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster r | 75d ago |
| CVE-2026-72149 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation C | 75d ago |
| CVE-2026-72141 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read o | 75d ago |
| CVE-2026-16611 | 7.5 | — | — | — | — | The Product Feed PRO for WooCommerce by AdTribes WordPress plugin before 13.5.7 does not perform an authorization | 75d ago |
| CVE-2026-15162 | 7.5 | — | — | — | — | The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type | 75d ago |
