| CVE-2025-61021 | 7.5 | — | — | — | — | An issue in the sqlo_natural_join_cond component of openlink virtuoso-opensource v7.2.11 allows attackers to cause | 127d ago |
| CVE-2025-61020 | 7.5 | — | — | — | — | An issue in the sqlo_strip_in_join component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a D | 127d ago |
| CVE-2025-61019 | 7.5 | — | — | — | — | An issue in the sqlo_key_part_best component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a D | 127d ago |
| CVE-2025-61018 | 7.5 | — | — | — | — | An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a De | 127d ago |
| CVE-2026-54314 | 7.5 | — | — | — | n8n / n8n | n8n is an open source workflow automation platform. | 127d ago |
| CVE-2026-56322 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /updates endpoint th | 127d ago |
| CVE-2026-56248 | 7.5 | — | — | — | — | Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising | 127d ago |
| CVE-2023-54365 | 7.5 | — | — | — | traefik / traefik | Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling | 127d ago |
| CVE-2026-8379 | 7.5 | — | — | — | — | The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the fil | 127d ago |
| CVE-2026-53923 | 7.5 | — | — | — | vllm / vllm | vLLM is an inference and serving engine for large language models (LLMs). | 128d ago |
| CVE-2026-41523 | 7.5 | — | — | — | vllm / vllm | vLLM is an inference and serving engine for large language models (LLMs). | 128d ago |
| CVE-2026-56323 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channel_self endpoint | 128d ago |
| CVE-2026-48517 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48516 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48515 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48514 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48513 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48512 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48511 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48510 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48506 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-48502 | 7.5 | — | — | — | messagepack / messagepack | MessagePack for C# is a MessagePack serializer for C#. | 128d ago |
| CVE-2026-55603 | 7.5 | — | — | — | chimurai / http-proxy-middleware | http-proxy-middleware is node.js http-proxy middleware. | 128d ago |
| CVE-2026-54299 | 7.5 | — | — | — | astro / astro | Astro is a web framework. | 128d ago |
| CVE-2026-54293 | 7.5 | — | — | — | nltk / nltk | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting rese | 128d ago |
| CVE-2026-53779 | 7.5 | — | — | — | — | WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attac | 128d ago |
| CVE-2026-54283 | 7.5 | — | — | — | encode / starlette | Starlette is a lightweight ASGI framework/toolkit. | 128d ago |
| CVE-2026-54280 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-54279 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-54278 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-54277 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-54275 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-54274 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-54273 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-53571 | 7.5 | — | — | — | vitejs / vite | Vite is a frontend tooling framework for JavaScript. | 128d ago |
| CVE-2026-53539 | 7.5 | — | — | — | fastapiexpert / python-multipart | Python-Multipart is a streaming multipart parser for Python. | 128d ago |
| CVE-2026-50269 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 128d ago |
| CVE-2026-50170 | 7.5 | — | — | — | angular / angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and | 128d ago |
| CVE-2026-48712 | 7.5 | — | — | — | protobufjs project / protobufjs | protobufjs compiles protobuf definitions into JavaScript (JS) functions. | 128d ago |
| CVE-2026-42127 | 7.5 | — | — | — | grafana / grafana | The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated a | 128d ago |
| CVE-2026-9071 | 7.5 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0. | 128d ago |
| CVE-2026-8858 | 7.5 | — | — | — | ibm / i | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code executi | 128d ago |
| CVE-2026-54268 | 7.5 | — | — | — | angular / angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and | 128d ago |
| CVE-2025-66389 | 7.5 | — | — | — | microsoft / github copilot | GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-h | 128d ago |
| CVE-2026-12581 | 7.5 | — | — | — | — | EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. | 128d ago |
| CVE-2026-56253 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function | 129d ago |
| CVE-2026-56242 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that retu | 129d ago |
| CVE-2026-56341 | 7.5 | — | — | — | — | AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking a | 130d ago |
| CVE-2020-37255 | 7.5 | — | — | — | — | WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated | 130d ago |
| CVE-2026-11912 | 7.5 | — | — | — | — | The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authori | 130d ago |
| CVE-2026-11911 | 7.5 | — | — | — | — | The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path v | 130d ago |
| CVE-2026-56214 | 7.5 | — | — | — | — | Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints is_tria | 131d ago |
| CVE-2026-56082 | 7.5 | — | — | — | — | Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER Pos | 131d ago |
| CVE-2026-50559 | 7.5 | — | — | — | quarkus / quarkus | Quarkus is a Java framework for building cloud-native applications. | 131d ago |
| CVE-2026-48774 | 7.5 | — | — | — | proxysql / proxysql | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. | 131d ago |
| CVE-2026-49293 | 7.5 | — | — | — | sunnyadn / js-toml | js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. | 131d ago |
| CVE-2023-54357 | 7.5 | — | — | — | artio / book it\! | Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated at | 131d ago |
| CVE-2019-25762 | 7.5 | — | — | — | joomboost / joomproject | Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated | 131d ago |
| CVE-2026-48139 | 7.5 | — | — | — | ni / instrumentstudio | There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an | 131d ago |
| CVE-2026-48138 | 7.5 | — | — | — | ni / instrumentstudio | There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check tha | 131d ago |
