| CVE-2026-6893 | 7.5 | — | — | — | — | A flaw was found in dracut. | 140d ago |
| CVE-2026-1220 | 7.5 | — | — | — | google / chrome | Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion | 140d ago |
| CVE-2025-71330 | 7.5 | — | — | — | image-size / image-size | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently bl | 140d ago |
| CVE-2025-71329 | 7.5 | — | — | — | image-size / image-size | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently bl | 140d ago |
| CVE-2026-3018zero day | 7.5 | 1.4% | 1/3 | same day | — | The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpmlsubscriber_id’ paramete | 140d ago |
| CVE-2026-10846 | 7.5 | — | — | — | nlnetlabs / ldns | NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, l | 140d ago |
| CVE-2026-26237 | 7.5 | — | — | — | qnap / qumagie | A missing authorization vulnerability has been reported to affect QuMagie. | 141d ago |
| CVE-2026-45541 | 7.5 | — | — | — | espressif / esp-idf | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. | 141d ago |
| CVE-2026-46545 | 7.5 | — | — | — | — | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. | 141d ago |
| CVE-2026-46541 | 7.5 | — | — | — | — | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. | 141d ago |
| CVE-2026-44716 | 7.5 | — | — | — | pipecat / pipecat | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. | 141d ago |
| CVE-2026-41728 | 7.5 | — | — | — | vmware / spring data rest | Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter | 141d ago |
| CVE-2026-41716 | 7.5 | — | — | — | broadcom / spring data commons | Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache ke | 141d ago |
| CVE-2026-41695 | 7.5 | — | — | — | broadcom / spring data commons | Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker- | 141d ago |
| CVE-2026-40988 | 7.5 | — | — | — | vmware / spring security | An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout | 141d ago |
| CVE-2026-9742 | 7.5 | — | — | — | mongodb / mongodb | When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter | 141d ago |
| CVE-2026-9740 | 7.5 | — | — | — | mongodb / mongodb | A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod proces | 141d ago |
| CVE-2026-46374 | 7.5 | — | — | — | sqlfluff / sqlfluff | SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. | 141d ago |
| CVE-2026-46373 | 7.5 | — | — | — | sqlfluff / sqlfluff | SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. | 141d ago |
| CVE-2026-34713 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource | 141d ago |
| CVE-2026-34712 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Valida | 141d ago |
| CVE-2026-34711 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or W | 141d ago |
| CVE-2026-11799 | 7.5 | — | — | — | mozilla / focus | UXSS in Focus for iOS / Klar Webkit navigation. | 141d ago |
| CVE-2025-71319 | 7.5 | — | — | — | image-size / image-size | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently bl | 141d ago |
| CVE-2026-39169 | 7.5 | — | — | — | — | SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php. | 141d ago |
| CVE-2026-36823 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAut | 141d ago |
| CVE-2026-36822 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAdd | 141d ago |
| CVE-2026-36821 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCro | 141d ago |
| CVE-2026-36820 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAut | 141d ago |
| CVE-2026-36819 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMA | 141d ago |
| CVE-2026-36818 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the wewifi | 141d ago |
| CVE-2026-36817 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAu | 141d ago |
| CVE-2026-36816 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the wewif | 141d ago |
| CVE-2026-36815 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the hostn | 141d ago |
| CVE-2026-36813 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picCr | 141d ago |
| CVE-2026-36811 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picNa | 141d ago |
| CVE-2026-36810 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the gotoU | 141d ago |
| CVE-2026-36809 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAu | 141d ago |
| CVE-2026-36808 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAu | 141d ago |
| CVE-2026-36807 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAu | 141d ago |
| CVE-2026-36806 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAu | 141d ago |
| CVE-2026-36805 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the | 141d ago |
| CVE-2026-36803 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page par | 141d ago |
| CVE-2026-36802 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page par | 141d ago |
| CVE-2026-36801 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBin | 141d ago |
| CVE-2026-36800 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBin | 141d ago |
| CVE-2026-36799 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the portalAu | 141d ago |
| CVE-2026-36797 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBind | 141d ago |
| CVE-2026-36796 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropNa | 141d ago |
| CVE-2026-36794 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stac | 141d ago |
| CVE-2026-36793 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stac | 141d ago |
| CVE-2026-36792 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overf | 141d ago |
| CVE-2026-36791 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save_list | 141d ago |
| CVE-2026-36784 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overf | 141d ago |
| CVE-2026-36783 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overf | 141d ago |
| CVE-2026-36779 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stac | 141d ago |
| CVE-2026-36771 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overf | 141d ago |
| CVE-2026-36770 | 7.5 | — | — | — | — | Shenzhen Tenda Technology Co., Ltd Tenda US_W3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go | 141d ago |
| CVE-2026-36719 | 7.5 | — | — | — | — | An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticat | 141d ago |
| CVE-2025-55657 | 7.5 | — | — | — | gpac / gpac | A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows | 141d ago |
