| CVE-2026-55851 | 7.5 | — | — | — | netty / netty | Netty is a network application framework for development of protocol servers and clients. | 99d ago |
| CVE-2026-47247 | 7.5 | — | — | — | struktur / libheif | libheif is a HEIF and AVIF file format decoder and encoder. | 99d ago |
| CVE-2026-47063 | 7.5 | — | — | — | oracle / jre | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle J | 99d ago |
| CVE-2026-47057 | 7.5 | — | — | — | oracle / jre | Vulnerability in Oracle Java SE (component: Scripting). | 99d ago |
| CVE-2026-47018 | 7.5 | — | — | — | oracle / siebel crm | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). | 99d ago |
| CVE-2026-46941 | 7.5 | — | — | — | oracle / cost management | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). | 99d ago |
| CVE-2026-35287 | 7.5 | — | — | — | oracle / application testing suite | Vulnerability in Oracle Application Testing Suite. | 99d ago |
| CVE-2026-52476 | 7.5 | — | — | — | — | SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the g | 99d ago |
| CVE-2026-52474 | 7.5 | — | — | — | — | An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file. | 99d ago |
| CVE-2026-47690 | 7.5 | — | — | — | — | MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. | 99d ago |
| CVE-2026-30633exploited | 7.5 | 0.89% | 1/3 | +65d | — | Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc | 99d ago |
| CVE-2026-56852 | 7.5 | — | — | — | — | A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. | 99d ago |
| CVE-2026-50759 | 7.5 | — | — | — | — | An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE / | 99d ago |
| CVE-2026-50756 | 7.5 | — | — | — | — | An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x- | 99d ago |
| CVE-2026-47667 | 7.5 | — | — | — | — | CImg Library is a C++ library for image processing. | 99d ago |
| CVE-2026-46600 | 7.5 | — | — | — | — | Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. | 99d ago |
| CVE-2026-30632 | 7.5 | — | — | — | — | Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool | 99d ago |
| CVE-2026-15957 | 7.5 | — | — | — | — | Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy inte | 99d ago |
| CVE-2026-21579 | 7.5 | — | — | — | atlassian / confluence data center | This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9 | 99d ago |
| CVE-2026-16243 | 7.5 | — | — | — | eclipse / omr | In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of b | 99d ago |
| CVE-2026-44907 | 7.5 | — | — | — | — | A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function | 99d ago |
| CVE-2026-15793 | 7.5 | — | — | — | mobyproject / buildkit | BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out | 99d ago |
| CVE-2026-15792 | 7.5 | — | — | — | mobyproject / buildkit | A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a p | 99d ago |
| CVE-2026-15791 | 7.5 | — | — | — | mobyproject / buildkit | A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. | 99d ago |
| CVE-2026-15789 | 7.5 | — | — | — | mobyproject / buildkit | A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit- | 99d ago |
| CVE-2026-65052 | 7.5 | — | — | — | — | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that all | 99d ago |
| CVE-2026-16445 | 7.5 | — | — | — | — | A flaw was found in dracut. | 99d ago |
| CVE-2026-16409 | 7.5 | — | — | — | mozilla / firefox | Invalid pointer in the Security: PSM component. | 99d ago |
| CVE-2026-16405 | 7.5 | — | — | — | mozilla / firefox | Information disclosure in the Networking: WebSockets component. | 99d ago |
| CVE-2026-16400 | 7.5 | — | — | — | mozilla / firefox | Information disclosure in the DOM: Security component. | 99d ago |
| CVE-2026-16399 | 7.5 | — | — | — | mozilla / firefox | Site isolation issue in the DOM: Navigation component. | 99d ago |
| CVE-2026-16398 | 7.5 | — | — | — | mozilla / firefox | Site isolation issue in the Graphics component. | 99d ago |
| CVE-2026-16391 | 7.5 | — | — | — | mozilla / firefox | Information disclosure in the Storage: IndexedDB component. | 99d ago |
| CVE-2026-16386 | 7.5 | — | — | — | mozilla / firefox | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. | 99d ago |
| CVE-2026-16385 | 7.5 | — | — | — | mozilla / firefox | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. | 99d ago |
| CVE-2026-16384 | 7.5 | — | — | — | mozilla / firefox | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. | 99d ago |
| CVE-2026-16378 | 7.5 | — | — | — | mozilla / firefox | Other issue in the DOM: Copy & Paste and Drag & Drop component. | 99d ago |
| CVE-2026-16376 | 7.5 | — | — | — | mozilla / firefox | Denial-of-service in the Graphics: WebGPU component. | 99d ago |
| CVE-2026-16374 | 7.5 | — | — | — | mozilla / firefox | Information disclosure in the Framework component in DevTools. | 99d ago |
| CVE-2026-16373 | 7.5 | — | — | — | mozilla / firefox mobile | Information disclosure in the Privacy component in Firefox for Android. | 99d ago |
| CVE-2026-16354 | 7.5 | — | — | — | mozilla / firefox | Information disclosure in the Graphics: ImageLib component. | 99d ago |
| CVE-2026-8082 | 7.5 | — | — | — | — | The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in | 100d ago |
| CVE-2023-37507 | 7.5 | — | — | — | hcltech / devops plan | HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks base | 100d ago |
| CVE-2026-55833 | 7.5 | — | — | — | netty / netty | Netty is a network application framework for development of protocol servers and clients. | 100d ago |
| CVE-2026-55831 | 7.5 | — | — | — | netty / netty | Netty is a network application framework for development of protocol servers and clients. | 100d ago |
| CVE-2026-51031 | 7.5 | — | — | — | — | FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpo | 100d ago |
| CVE-2024-51316 | 7.5 | — | — | — | — | The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the f | 100d ago |
| CVE-2026-56452 | 7.5 | — | — | — | apache / mina sshd | Path traversal in the sshd-scp component of Apache MINA SSHD. | 100d ago |
| CVE-2026-13380 | 7.5 | — | — | — | vsee / clinic | VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three una | 100d ago |
| CVE-2026-15788 | 7.5 | — | — | — | mobyproject / buildkit | BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS direct | 100d ago |
| CVE-2026-64619 | 7.5 | — | — | — | — | FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthentic | 100d ago |
| CVE-2026-64194 | 7.5 | — | — | — | — | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. | 100d ago |
| CVE-2026-63770 | 7.5 | — | — | — | — | Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unaut | 100d ago |
| CVE-2026-64612 | 7.5 | — | — | — | — | A flaw was found in libcupsfilters and cups-filters. | 100d ago |
| CVE-2026-48812 | 7.5 | — | — | — | — | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. | 100d ago |
| CVE-2026-54538 | 7.5 | — | — | — | neutrinolabs / xrdp | xrdp is an open source RDP server. | 100d ago |
| CVE-2026-32820 | 7.5 | — | — | — | — | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. | 100d ago |
| CVE-2026-32806 | 7.5 | — | — | — | — | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. | 100d ago |
| CVE-2026-45713 | 7.5 | — | — | — | axllent / mailpit | Mailpit is an email testing tool and API for developers. | 100d ago |
| CVE-2026-32807 | 7.5 | — | — | — | — | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. | 100d ago |
