| CVE-2026-67317 | 7.5 | — | — | — | axios / axios | axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the f | 89d ago |
| CVE-2026-67315 | 7.5 | — | — | — | axios / axios | axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in sh | 89d ago |
| CVE-2026-67313 | 7.5 | — | — | — | axios / axios | axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field na | 89d ago |
| CVE-2026-67312 | 7.5 | — | — | — | axios / axios | axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataTo | 89d ago |
| CVE-2026-67304 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanu | 89d ago |
| CVE-2026-67301 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the Polygo | 89d ago |
| CVE-2026-67300 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy f | 89d ago |
| CVE-2026-67299 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON | 89d ago |
| CVE-2026-67298 | 7.5 | — | — | — | — | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_s | 89d ago |
| CVE-2026-67297 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP res | 89d ago |
| CVE-2026-67296 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to | 89d ago |
| CVE-2026-67291 | 7.5 | — | — | — | freerdp / freerdp | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fra | 89d ago |
| CVE-2026-67290 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC | 89d ago |
| CVE-2026-67288 | 7.5 | — | — | — | freerdp / freerdp | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that a | 89d ago |
| CVE-2026-18536 | 7.5 | — | — | — | rrwo / data\ | Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. | 89d ago |
| CVE-2026-14839 | 7.5 | — | — | — | — | The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a pu | 89d ago |
| CVE-2026-15006 | 7.5 | — | — | — | — | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress i | 89d ago |
| CVE-2026-62999 | 7.5 | — | — | — | — | Copier is a library and CLI app for rendering project templates. | 89d ago |
| CVE-2026-53599 | 7.5 | — | — | — | — | REDAXO is a PHP-based content management system. | 89d ago |
| CVE-2026-53505 | 7.5 | — | — | — | — | Thumbor is an open-source photo thumbnail service by globo.com. | 89d ago |
| CVE-2026-53504 | 7.5 | — | — | — | — | Thumbor is an open-source photo thumbnail service by globo.com. | 89d ago |
| CVE-2026-53503 | 7.5 | — | — | — | — | Thumbor is an open-source photo thumbnail service by globo.com. | 89d ago |
| CVE-2026-52856 | 7.5 | — | — | — | — | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. | 89d ago |
| CVE-2026-17347 | 7.5 | — | — | — | pgadmin / pgadmin 4 | The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command | 89d ago |
| CVE-2026-18446 | 7.5 | — | — | — | openjsf / fast-uri | fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a | 89d ago |
| CVE-2026-18358 | 7.5 | — | — | — | — | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. | 90d ago |
| CVE-2026-15722 | 7.5 | — | — | — | redhat / directory server | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). | 90d ago |
| CVE-2026-11770 | 7.5 | — | — | — | redhat / directory server | A flaw was found in 389 Directory Server. | 90d ago |
| CVE-2026-65310 | 7.5 | — | — | — | — | ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and c | 90d ago |
| CVE-2026-65309 | 7.5 | — | — | — | — | ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversibl | 90d ago |
| CVE-2026-15048 | 7.5 | — | — | — | — | The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, al | 90d ago |
| CVE-2026-14930 | 7.5 | — | — | — | — | The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a | 90d ago |
| CVE-2026-14830 | 7.5 | — | — | — | — | The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment processor that a checkout session was ac | 90d ago |
| CVE-2026-14333 | 7.5 | — | — | — | — | The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location unde | 90d ago |
| CVE-2026-14319 | 7.5 | — | — | — | — | The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns re | 90d ago |
| CVE-2026-12720 | 7.5 | — | — | — | — | The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be instantiated when it deserialises | 90d ago |
| CVE-2026-63222 | 7.5 | — | — | — | — | CodeIgniter is a PHP full-stack web framework. | 90d ago |
| CVE-2026-56673 | 7.5 | — | — | — | — | ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. | 90d ago |
| CVE-2026-56671 | 7.5 | — | — | — | — | ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. | 90d ago |
| CVE-2026-43832 | 7.5 | — | — | — | — | Full details and mitigation steps are currently restricted and will be published at a later date. | 90d ago |
| CVE-2026-43831 | 7.5 | — | — | — | — | Full details and mitigation steps are currently restricted and will be published at a later date. | 90d ago |
| CVE-2026-43829 | 7.5 | — | — | — | — | Full details and mitigation steps are currently restricted and will be published at a later date. | 90d ago |
| CVE-2026-14541 | 7.5 | — | — | — | google / mcp toolbox for databases | An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Goo | 90d ago |
| CVE-2026-14539 | 7.5 | — | — | — | google / mcp toolbox for databases | An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versio | 90d ago |
| CVE-2026-66360 | 7.5 | — | — | — | — | The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. | 90d ago |
| CVE-2026-63559 | 7.5 | — | — | — | — | An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker | 90d ago |
| CVE-2026-18064 | 7.5 | — | — | — | — | An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leave | 90d ago |
| CVE-2026-68500 | 7.5 | — | — | — | — | Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. | 90d ago |
| CVE-2026-66755 | 7.5 | — | — | — | apache / tika | Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, an | 90d ago |
| CVE-2026-61536 | 7.5 | — | — | — | — | Banks generates meaningful LLM prompts using a simple template language. | 90d ago |
| CVE-2026-18140 | 7.5 | — | — | — | amazon / aws-smithy-json | Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the | 90d ago |
| CVE-2026-15978 | 7.5 | — | — | — | lmsys / sglang | SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose t | 90d ago |
| CVE-2026-15977 | 7.5 | — | — | — | lmsys / sglang | SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SS | 90d ago |
| CVE-2026-12942 | 7.5 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. | 90d ago |
| CVE-2026-12733 | 7.5 | — | — | — | ibm / datapower gateway | IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitati | 90d ago |
| CVE-2026-10545 | 7.5 | — | — | — | ibm / planning analytics local | IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to red | 90d ago |
| CVE-2024-25039 | 7.5 | — | — | — | ibm / engineering requirements management doors web access | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9 | 90d ago |
| CVE-2026-9322 | 7.5 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0. | 90d ago |
| CVE-2026-62663 | 7.5 | — | — | — | — | Banks generates meaningful LLM prompts using a simple template language. | 90d ago |
| CVE-2026-11771 | 7.5 | — | — | — | openvpn / openvpn | OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write | 90d ago |
