| CVE-2026-5073exploited | 7.5 | 1.4% | 1/3 | +2d | — | The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_dire | 148d ago |
| CVE-2026-48594 | 7.5 | — | — | — | elixir-tesla / tesla | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a deni | 148d ago |
| CVE-2026-47265 | 7.5 | — | — | — | aiohttp / aiohttp | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | 148d ago |
| CVE-2026-42342 | 7.5 | — | — | — | shopify / react-router | React Router is a router for React. | 148d ago |
| CVE-2026-41577 | 7.5 | — | — | — | goauthentik / authentik | authentik is an open-source identity provider. | 148d ago |
| CVE-2026-34077 | 7.5 | — | — | — | shopify / react-router | React Router is a router for React. | 148d ago |
| CVE-2026-10701 | 7.5 | — | — | — | mozilla / firefox | Incorrect boundary conditions in the Graphics: Text component. | 148d ago |
| CVE-2026-45686 | 7.5 | — | — | — | opentelemetry / ebpf instrumentation | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. | 148d ago |
| CVE-2026-45685 | 7.5 | — | — | — | opentelemetry / ebpf instrumentation | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. | 148d ago |
| CVE-2026-45678 | 7.5 | — | — | — | opentelemetry / ebpf instrumentation | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. | 148d ago |
| CVE-2026-45553 | 7.5 | — | — | — | — | NiceGUI is a Python-based UI framework. | 148d ago |
| CVE-2026-40780 | 7.5 | — | — | — | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Pas | 148d ago |
| CVE-2026-10621 | 7.5 | — | — | — | — | Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP | 148d ago |
| CVE-2026-42670 | 7.5 | — | — | — | — | Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exp | 148d ago |
| CVE-2026-42669 | 7.5 | — | — | — | — | Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security | 148d ago |
| CVE-2025-58024 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 148d ago |
| CVE-2026-3514 | 7.5 | — | — | — | prefect / prefect | In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling | 148d ago |
| CVE-2026-8293 | 7.5 | — | — | — | — | The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of | 148d ago |
| CVE-2026-40964 | 7.5 | — | — | — | — | Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated rem | 149d ago |
| CVE-2026-49136 | 7.5 | — | — | — | — | Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_im | 149d ago |
| CVE-2025-70099 | 7.5 | — | — | — | — | A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows a | 149d ago |
| CVE-2026-37235 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP associat | 149d ago |
| CVE-2026-37233 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. | 149d ago |
| CVE-2026-37231 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. | 149d ago |
| CVE-2026-37230 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exi | 149d ago |
| CVE-2026-37229 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. | 149d ago |
| CVE-2026-37228 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). | 149d ago |
| CVE-2026-37226 | 7.5 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. | 149d ago |
| CVE-2026-42677 | 7.5 | — | — | — | — | Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured A | 149d ago |
| CVE-2026-42674 | 7.5 | — | — | — | — | Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding. | 149d ago |
| CVE-2026-42673 | 7.5 | — | — | — | — | Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Act | 149d ago |
| CVE-2026-37227 | 7.5 | — | — | — | — | FlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but unimplemented E2AP | 149d ago |
| CVE-2026-37225 | 7.5 | — | — | — | — | FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty ricEventTriggerDefinit | 149d ago |
| CVE-2026-37224 | 7.5 | — | — | — | — | FlexRIC v2.0.0 crashes when receiving a duplicate E2_SETUP_REQUEST from the same or spoofed E2 Node. | 149d ago |
| CVE-2026-37223 | 7.5 | — | — | — | — | FlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher. | 149d ago |
| CVE-2026-37222 | 7.5 | — | — | — | — | FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages. | 149d ago |
| CVE-2026-37221 | 7.5 | — | — | — | — | FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding | 149d ago |
| CVE-2026-37220 | 7.5 | — | — | — | — | FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent. | 149d ago |
| CVE-2026-49361 | 7.5 | — | — | — | apache / fluss | Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBasedFrameDecoder with Integer.MAX_VALUE as th | 149d ago |
| CVE-2026-41084 | 7.5 | — | — | — | apache / airflow | A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskIn | 149d ago |
| CVE-2018-25426 | 7.5 | — | — | — | winmtr / winmtr | WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a | 151d ago |
| CVE-2018-25408 | 7.5 | — | — | — | — | The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoint that allows | 151d ago |
| CVE-2026-9757 | 7.5 | — | — | — | — | The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in a | 151d ago |
| CVE-2026-7459 | 7.5 | — | — | — | — | The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (S | 151d ago |
| CVE-2026-47123 | 7.5 | — | — | — | — | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. | 152d ago |
| CVE-2026-46599 | 7.5 | — | — | — | — | The TIFF decoder does not place a limit on the size of PackBits-compressed data. | 152d ago |
| CVE-2026-46527 | 7.5 | — | — | — | yhirose / cpp-httplib | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. | 152d ago |
| CVE-2026-46385 | 7.5 | — | — | — | — | iskorotkov/avro is a fast Go Avro codec. | 152d ago |
| CVE-2026-46384 | 7.5 | — | — | — | — | iskorotkov/avro is a fast Go Avro codec. | 152d ago |
| CVE-2026-44422 | 7.5 | — | — | — | freerdp / freerdp | FreeRDP is a free implementation of the Remote Desktop Protocol. | 152d ago |
| CVE-2026-49372 | 7.5 | — | — | — | jetbrains / teamcity | In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible | 152d ago |
| CVE-2026-44648 | 7.5 | — | — | — | — | SillyTavern is a locally installed user interface that allows users to interact with text generation large languag | 152d ago |
| CVE-2026-10108 | 7.5 | — | — | — | — | xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpo | 152d ago |
| CVE-2026-10069 | 7.5 | — | — | — | — | A vulnerability has been found in Shibby Tomato 1.28. | 152d ago |
| CVE-2018-25396 | 7.5 | — | — | — | — | Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers | 152d ago |
| CVE-2018-25391 | 7.5 | — | — | — | — | HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers t | 152d ago |
| CVE-2026-10073 | 7.5 | — | — | — | — | DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attacke | 152d ago |
| CVE-2025-41271 | 7.5 | — | — | — | waterfall-security / wf-500 firmware | Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and | 152d ago |
| CVE-2026-10056 | 7.5 | — | — | — | — | CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the de | 152d ago |
| CVE-2026-9990 | 7.5 | — | — | — | google / chrome | Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who conv | 153d ago |
