| CVE-2026-49788 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service ove | 106d ago |
| CVE-2026-49787 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny s | 106d ago |
| CVE-2026-49181 | 7.5 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privilege | 106d ago |
| CVE-2026-49171 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-47296 | 7.5 | — | — | — | microsoft / sql server 2016 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an autho | 106d ago |
| CVE-2026-45646 | 7.5 | — | — | — | microsoft / asp.net core odata | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 106d ago |
| CVE-2026-40378 | 7.5 | — | — | — | microsoft / windows 10 1607 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows a | 106d ago |
| CVE-2026-9128 | 7.5 | — | — | — | rockwellautomation / studio 5000 logix designer | A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the Ext | 106d ago |
| CVE-2026-9127 | 7.5 | — | — | — | rockwellautomation / studio 5000 logix designer | A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on | 106d ago |
| CVE-2026-9108 | 7.5 | — | — | — | rockwellautomation / studio 5000 logix designer | A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths | 106d ago |
| CVE-2026-60081 | 7.5 | — | — | — | — | DBI::ProfileData versions before 1.651 for Perl do not limit the path index. | 106d ago |
| CVE-2026-59841 | 7.5 | — | — | — | fortinet / fortisiem | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAg | 106d ago |
| CVE-2026-59836 | 7.5 | — | — | — | fortinet / forticlientems | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4 | 106d ago |
| CVE-2026-59205 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 106d ago |
| CVE-2026-59204 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 106d ago |
| CVE-2026-59199 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 106d ago |
| CVE-2026-12707 | 7.5 | — | — | — | — | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing o | 106d ago |
| CVE-2026-12523 | 7.5 | — | — | — | cloudflare / quiche | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by | 106d ago |
| CVE-2025-53379 | 7.5 | — | — | — | fortinet / fortiauthenticator | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all | 106d ago |
| CVE-2026-60114 | 7.5 | — | — | — | dan-in-ca / sustainable irrigation platform | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows a | 106d ago |
| CVE-2026-51105 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service | 106d ago |
| CVE-2026-15076 | 7.5 | — | — | — | eclipse / vert.x | In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Ecli | 107d ago |
| CVE-2026-15075 | 7.5 | — | — | — | eclipse / vert.x | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler | 107d ago |
| CVE-2026-10051 | 7.5 | — | — | — | eclipse / jetty | In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent re | 107d ago |
| CVE-2024-7708 | 7.5 | — | — | — | eclipse / jetty | For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. | 107d ago |
| CVE-2026-58101 | 7.5 | — | — | — | jonasbn / crypt\ | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. | 107d ago |
| CVE-2026-62328 | 7.5 | — | — | — | — | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote | 107d ago |
| CVE-2026-62184 | 7.5 | — | — | — | — | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address fro | 107d ago |
| CVE-2026-61458 | 7.5 | — | — | — | — | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks | 107d ago |
| CVE-2026-51539 | 7.5 | — | — | — | — | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. | 107d ago |
| CVE-2026-39042 | 7.5 | — | — | — | — | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a | 107d ago |
| CVE-2026-15685 | 7.5 | — | — | — | ollama / ollama | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. | 107d ago |
| CVE-2026-15683 | 7.5 | — | — | — | — | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. | 107d ago |
| CVE-2026-15680 | 7.5 | — | — | — | — | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. | 107d ago |
| CVE-2026-26396 | 7.5 | — | — | — | — | OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/app | 107d ago |
| CVE-2026-40553 | 7.5 | — | — | — | fossies / gawk | Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). | 107d ago |
| CVE-2026-40467 | 7.5 | — | — | — | fossies / gawk | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). | 107d ago |
| CVE-2026-15584 | 7.5 | — | — | — | — | A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. | 107d ago |
| CVE-2026-57815 | 7.5 | — | — | — | — | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your Al | 107d ago |
| CVE-2026-57805 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57804 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57803 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57802 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57801 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57800 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57799 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57798 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57796 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57795 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57794 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57793 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57792 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57791 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57790 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57789 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57788 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-57729 | 7.5 | — | — | — | — | Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access | 107d ago |
| CVE-2026-57727exploited | 7.5 | 0.39% | 1/3 | +98d | — | Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control | 107d ago |
| CVE-2026-57705 | 7.5 | — | — | — | — | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configure | 107d ago |
| CVE-2026-57697 | 7.5 | — | — | — | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-p | 107d ago |
