| CVE-2026-24264 | 7.5 | — | — | — | nvidia / triton inference server | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of | 119d ago |
| CVE-2026-14181 | 7.5 | — | — | — | fastify / fastify\/middie | @fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engin | 119d ago |
| CVE-2026-12576 | 7.5 | — | — | — | — | DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerabili | 120d ago |
| CVE-2026-12575 | 7.5 | — | — | — | — | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. | 120d ago |
| CVE-2026-1239 | 7.5 | — | — | — | — | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to unauthorized a | 120d ago |
| CVE-2026-14193 | 7.5 | — | — | — | — | DVP80ES300T with Improper Validation of Array Index Vulnerability | 120d ago |
| CVE-2026-11823 | 7.5 | — | — | — | — | The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'store_servic | 120d ago |
| CVE-2026-11568 | 7.5 | — | — | — | — | The Product Configurator for WooCommerce WordPress plugin before 1.7.3 does not perform any authorisation or post- | 120d ago |
| CVE-2026-13468 | 7.5 | — | — | — | — | The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to authoriz | 120d ago |
| CVE-2026-12923 | 7.5 | — | — | — | — | The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including | 120d ago |
| CVE-2026-20458 | 7.5 | — | — | — | — | In Modem, there is a possible memory corruption due to a missing bounds check. | 120d ago |
| CVE-2026-54592 | 7.5 | — | — | — | — | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. | 120d ago |
| CVE-2026-56300 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and get_org_perm_for_api | 120d ago |
| CVE-2026-56219 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains a NULL-auth bypass vulnerability in the public.get_org_user_access_rbac function th | 120d ago |
| CVE-2026-52198 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denia | 120d ago |
| CVE-2026-52197 | 7.5 | — | — | — | — | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the | 120d ago |
| CVE-2026-52195 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denia | 120d ago |
| CVE-2026-52193 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denia | 120d ago |
| CVE-2026-14115 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attack | 120d ago |
| CVE-2026-14114 | 7.5 | — | — | — | google / chrome | Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local | 120d ago |
| CVE-2026-14064 | 7.5 | — | — | — | google / chrome | Use after free in PageInfo in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convin | 120d ago |
| CVE-2026-13968 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote at | 120d ago |
| CVE-2026-13925 | 7.5 | — | — | — | google / chrome | Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote atta | 120d ago |
| CVE-2026-13891 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote | 120d ago |
| CVE-2026-13856 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0.7871.47 allowed a | 120d ago |
| CVE-2026-13855 | 7.5 | — | — | — | google / chrome | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a | 120d ago |
| CVE-2026-13831 | 7.5 | — | — | — | google / chrome | Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp | 120d ago |
| CVE-2026-13824 | 7.5 | — | — | — | google / chrome | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh | 120d ago |
| CVE-2026-13814 | 7.5 | — | — | — | google / chrome | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to | 120d ago |
| CVE-2026-13807 | 7.5 | — | — | — | google / chrome | Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a | 120d ago |
| CVE-2026-13802 | 7.5 | — | — | — | google / chrome | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to | 120d ago |
| CVE-2026-13794 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 al | 120d ago |
| CVE-2026-57585 | 7.5 | — | — | — | msgpack / messagepack | MessagePack is the serializer implementation for Python msgpack.org. | 120d ago |
| CVE-2026-52196 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denia | 120d ago |
| CVE-2026-50254 | 7.5 | — | — | — | — | An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. | 120d ago |
| CVE-2026-35505 | 7.5 | — | — | — | — | An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. | 120d ago |
| CVE-2026-44628 | 7.5 | — | — | — | — | An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid | 120d ago |
| CVE-2026-13207 | 7.5 | — | — | — | — | FUXA versions 1.3.1 and prior contain an authentication bypass vulnerability via dot-segment path normalization in | 120d ago |
| CVE-2026-13772 | 7.5 | — | — | — | ibm / websphere extreme scale | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied cla | 120d ago |
| CVE-2026-13759 | 7.5 | — | — | — | ibm / websphere extreme scale | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses (WsObjectInputStream, | 120d ago |
| CVE-2026-58375 | 7.5 | — | — | — | — | JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is an | 120d ago |
| CVE-2026-58169 | 7.5 | — | — | — | — | Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attacke | 120d ago |
| CVE-2026-49451 | 7.5 | — | — | — | — | The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to | 120d ago |
| CVE-2026-8451exploited | 7.5 | 0.50% | 1/3 | +1d | citrix / netscaler application delivery controller | Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or | 120d ago |
| CVE-2026-58016 | 7.5 | — | — | — | gnome / glib | A flaw was found in GLib. | 120d ago |
| CVE-2026-53433 | 7.5 | — | — | — | junegunn / fzf | fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to | 120d ago |
| CVE-2026-53432 | 7.5 | — | — | — | junegunn / fzf | fzf is vulnerable to Integer Overflow leading to crash in FuzzyMatchV2 function. | 120d ago |
| CVE-2026-13474 | 7.5 | — | — | — | citrix / netscaler application delivery controller | Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTT | 120d ago |
| CVE-2026-10817 | 7.5 | — | — | — | citrix / netscaler application delivery controller | Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeSta | 120d ago |
| CVE-2026-10816 | 7.5 | — | — | — | citrix / netscaler application delivery controller | Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Manage | 120d ago |
| CVE-2026-57081 | 7.5 | — | — | — | — | Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. | 120d ago |
| CVE-2026-57080 | 7.5 | — | — | — | — | Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-l | 120d ago |
| CVE-2026-14161 | 7.5 | — | — | — | — | Hospital Quening Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthent | 120d ago |
| CVE-2026-54475 | 7.5 | — | — | — | apache / activemq | Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. | 120d ago |
| CVE-2026-53917 | 7.5 | — | — | — | apache / activemq | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ | 120d ago |
| CVE-2026-53916 | 7.5 | — | — | — | apache / activemq | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ | 120d ago |
| CVE-2026-50750 | 7.5 | — | — | — | apache / activemq | Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. | 120d ago |
| CVE-2026-50734 | 7.5 | — | — | — | apache / activemq | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache Activ | 120d ago |
| CVE-2026-49434 | 7.5 | — | — | — | apache / activemq | Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. | 120d ago |
| CVE-2026-49432 | 7.5 | — | — | — | apache / activemq | Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. | 120d ago |
