| CVE-2026-34502 | 7.5 | — | — | — | apache / apr-util | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Ap | 83d ago |
| CVE-2026-34501 | 7.5 | — | — | — | apache / apr-util | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. | 83d ago |
| CVE-2026-28140 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions. | 83d ago |
| CVE-2025-49506 | 7.5 | — | — | — | apache / apr-util | APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashe | 83d ago |
| CVE-2026-66733 | 7.5 | — | — | — | — | Sonic 3 A.I.R. | 84d ago |
| CVE-2026-65551 | 7.5 | — | — | — | — | Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control S | 84d ago |
| CVE-2026-68481 | 7.5 | — | — | — | apache / cxf | In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenInt | 84d ago |
| CVE-2026-65432 | 7.5 | — | — | — | apache / cxf | Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entiti | 84d ago |
| CVE-2026-64958 | 7.5 | — | — | — | apache / cxf | An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apac | 84d ago |
| CVE-2026-57819 | 7.5 | — | — | — | apache / cxf | Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCou | 84d ago |
| CVE-2026-54225 | 7.5 | — | — | — | apache / cxf | Apache CXF allows to control the maximum attachment size via the "attachment-max-size". | 84d ago |
| CVE-2026-18649 | 7.5 | — | — | — | — | A flaw was found in the GStreamer gst-plugins-good package. | 84d ago |
| CVE-2026-18050 | 7.5 | — | — | — | — | The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serve | 84d ago |
| CVE-2026-16734 | 7.5 | — | — | — | — | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 does not verify that the caller owns the Str | 84d ago |
| CVE-2026-13154 | 7.5 | — | — | — | — | The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type i | 84d ago |
| CVE-2026-13153 | 7.5 | — | — | — | — | The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not restrict access to one of its public REST ro | 84d ago |
| CVE-2026-67872 | 7.5 | — | — | — | — | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-ite | 84d ago |
| CVE-2026-67871 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via th | 84d ago |
| CVE-2026-67869 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Se | 84d ago |
| CVE-2026-67867 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via th | 84d ago |
| CVE-2026-67866 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via th | 84d ago |
| CVE-2026-67863 | 7.5 | — | — | — | — | In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. | 84d ago |
| CVE-2026-71321 | 7.5 | — | — | — | — | Nuxt is an open-source web development framework for Vue.js. | 84d ago |
| CVE-2026-71316 | 7.5 | — | — | — | — | Nuxt is an open-source web development framework for Vue.js. | 84d ago |
| CVE-2026-67865 | 7.5 | — | — | — | — | S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. | 84d ago |
| CVE-2026-67864 | 7.5 | — | — | — | — | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagem | 84d ago |
| CVE-2026-71314 | 7.5 | — | — | — | — | Nuxt is an open-source web development framework for Vue.js. | 84d ago |
| CVE-2026-15996 | 7.5 | — | — | — | github / enterprise server | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attac | 84d ago |
| CVE-2026-69111 | 7.5 | — | — | — | — | Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote att | 84d ago |
| CVE-2026-55524 | 7.5 | — | — | — | — | PraisonAI is a multi-agent teams system. | 84d ago |
| CVE-2026-8446 | 7.5 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol | 84d ago |
| CVE-2026-14587 | 7.5 | — | — | — | neo4j / neo4j | Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bi | 84d ago |
| CVE-2026-7326 | 7.5 | — | — | — | progress / marklogic server | A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 al | 84d ago |
| CVE-2026-70601 | 7.5 | — | — | — | — | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. | 84d ago |
| CVE-2026-60023 | 7.5 | — | — | — | apache / answer | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. | 84d ago |
| CVE-2026-48911 | 7.5 | — | — | — | apache / answer | Insufficient Verification of Data Authenticity vulnerability in Apache Answer. | 84d ago |
| CVE-2026-48834 | 7.5 | — | — | — | apache / answer | Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. | 84d ago |
| CVE-2026-54876 | 7.5 | — | — | — | — | Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response check | 84d ago |
| CVE-2026-17613 | 7.5 | — | — | — | — | Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenti | 84d ago |
| CVE-2026-7529 | 7.5 | — | — | — | — | The wiseCampaign – WooCommerce Conversions Made Easy plugin for WordPress is vulnerable to unauthorized modificatio | 85d ago |
| CVE-2025-70962 | 7.5 | — | — | — | — | Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. | 85d ago |
| CVE-2026-71265 | 7.5 | — | — | — | — | Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received | 85d ago |
| CVE-2026-61891 | 7.5 | — | — | — | eclipse / theia | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download e | 85d ago |
| CVE-2026-46581 | 7.5 | — | — | — | eclipse / mojarra | In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize a | 85d ago |
| CVE-2026-71241 | 7.5 | — | — | — | — | Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_not_return_book | 85d ago |
| CVE-2026-71234 | 7.5 | — | — | — | — | Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via A | 85d ago |
| CVE-2026-12609 | 7.5 | — | — | — | eclipse / theia | In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/host | 85d ago |
| CVE-2026-71215 | 7.5 | — | — | — | — | art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include a | 85d ago |
| CVE-2026-71209 | 7.5 | — | — | — | — | audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET route | 85d ago |
| CVE-2026-71202 | 7.5 | — | — | — | — | The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions but o | 85d ago |
| CVE-2026-70378 | 7.5 | — | — | — | — | imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is | 85d ago |
| CVE-2026-70377 | 7.5 | — | — | — | — | imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 | 85d ago |
| CVE-2026-6639 | 7.5 | — | — | — | — | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure i | 85d ago |
| CVE-2026-64577 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_sen | 85d ago |
| CVE-2026-61483 | 7.5 | — | — | — | apache / lucy | ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. | 85d ago |
| CVE-2026-59675 | 7.5 | — | — | — | — | When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing | 85d ago |
| CVE-2026-18881 | 7.5 | — | — | — | — | The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the ` | 85d ago |
| CVE-2026-12000 | 7.5 | — | — | — | — | The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up | 85d ago |
| CVE-2026-68073 | 7.5 | — | — | — | apache / qpid broker-j | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to den | 85d ago |
| CVE-2026-67592 | 7.5 | — | — | — | apache / qpid protonj2 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticat | 85d ago |
