| CVE-2026-48972 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 154d ago |
| CVE-2026-46102 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abor | 154d ago |
| CVE-2026-46085 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling F | 154d ago |
| CVE-2026-46052 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative dentries when they | 154d ago |
| CVE-2026-46031 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Reinstate disabling of BHs around | 154d ago |
| CVE-2026-46027 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid early lgr access in smc_clc_wai | 154d ago |
| CVE-2026-46024 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in c | 154d ago |
| CVE-2026-45944 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing d | 154d ago |
| CVE-2026-45860 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connecti | 154d ago |
| CVE-2026-45859 | 7.5 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: do shared-unconfir | 154d ago |
| CVE-2026-3366 | 7.5 | — | — | — | ibm / infosphere optim test data fabrication | IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0. | 154d ago |
| CVE-2026-42760 | 7.5 | — | — | — | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Ca | 154d ago |
| CVE-2026-42736 | 7.5 | — | — | — | — | Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages a | 154d ago |
| CVE-2026-40850 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountDat | 154d ago |
| CVE-2025-14713 | 7.5 | — | — | — | synology / c2 identity edge server | An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1. | 154d ago |
| CVE-2026-40819 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 t | 154d ago |
| CVE-2026-40818 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_ge | 154d ago |
| CVE-2026-40817 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfi | 154d ago |
| CVE-2026-40816 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php | 154d ago |
| CVE-2026-40815 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getU | 154d ago |
| CVE-2026-40814 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php f | 154d ago |
| CVE-2026-40813 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues | 154d ago |
| CVE-2026-40812 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues | 154d ago |
| CVE-2026-40811 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractse | 154d ago |
| CVE-2026-40810 | 7.5 | — | — | — | — | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endp | 154d ago |
| CVE-2026-9200 | 7.5 | — | — | — | — | The Query Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including | 154d ago |
| CVE-2026-48959 | 7.5 | — | — | — | — | IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. | 154d ago |
| CVE-2026-44905 | 7.5 | — | — | — | — | Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. | 155d ago |
| CVE-2026-43988 | 7.5 | — | — | — | — | Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. | 155d ago |
| CVE-2026-44847 | 7.5 | — | — | — | — | MaxKB is an open-source AI assistant for enterprise. | 155d ago |
| CVE-2026-44209 | 7.5 | — | — | — | — | Banks generates meaningful LLM prompts using a template language that makes sense. | 155d ago |
| CVE-2026-8854 | 7.5 | — | — | — | ibm / http server | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache. | 155d ago |
| CVE-2026-8620 | 7.5 | — | — | — | ibm / websphere application server | IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application S | 155d ago |
| CVE-2026-8850 | 7.5 | — | — | — | ibm / http server | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload. | 155d ago |
| CVE-2026-48901 | 7.5 | — | — | — | joomla / joomla\! | The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key. | 155d ago |
| CVE-2026-48897 | 7.5 | — | — | — | joomla / joomla\! | Insufficient state checks lead to a vector that allows to bypass 2FA checks. | 155d ago |
| CVE-2026-48896 | 7.5 | — | — | — | joomla / joomla\! | Insufficient state checks lead to a vector that allows to bypass 2FA checks. | 155d ago |
| CVE-2026-45728 | 7.5 | — | — | — | — | Algernon is a small self-contained pure-Go web server. | 155d ago |
| CVE-2026-40384 | 7.5 | — | — | — | joomla / joomla\! | An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulne | 155d ago |
| CVE-2026-24212 | 7.5 | — | — | — | nvidia / isaac launchable | NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear tex | 155d ago |
| CVE-2026-48688 | 7.5 | — | — | — | pavel-odintsov / fastnetmon | FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 att | 155d ago |
| CVE-2026-48133 | 7.5 | — | — | — | — | When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be abl | 155d ago |
| CVE-2025-11482 | 7.5 | — | — | — | — | An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating | 155d ago |
| CVE-2026-39661 | 7.5 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 155d ago |
| CVE-2026-8047 | 7.5 | — | — | — | — | The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-lim | 155d ago |
| CVE-2026-9496 | 7.5 | — | — | — | — | Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addG | 155d ago |
| CVE-2026-9538 | 7.5 | — | — | — | archive\ / \ | Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar | 156d ago |
| CVE-2026-42497 | 7.5 | — | — | — | archive\ / \ | Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction d | 156d ago |
| CVE-2026-45438 | 7.5 | — | — | — | — | Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Confi | 156d ago |
| CVE-2026-45209 | 7.5 | — | — | — | — | Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured | 156d ago |
| CVE-2026-48844 | 7.5 | — | — | — | — | Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autova | 156d ago |
| CVE-2026-47077 | 7.5 | — | — | — | benoitc / hackney | Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. | 156d ago |
| CVE-2026-47075 | 7.5 | — | — | — | benoitc / hackney | Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting. | 156d ago |
| CVE-2026-47073 | 7.5 | — | — | — | benoitc / hackney | Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. | 156d ago |
| CVE-2026-47072 | 7.5 | — | — | — | benoitc / hackney | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Request/ | 156d ago |
| CVE-2026-47071 | 7.5 | — | — | — | benoitc / hackney | Uncontrolled Resource Consumption vulnerability in benoitc hackney allows Flooding. | 156d ago |
| CVE-2026-47067 | 7.5 | — | — | — | benoitc / hackney | Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. | 156d ago |
| CVE-2026-47066 | 7.5 | — | — | — | benoitc / hackney | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Allocatio | 156d ago |
| CVE-2018-25374 | 7.5 | — | — | — | — | Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthentic | 156d ago |
| CVE-2018-25368 | 7.5 | — | — | — | — | Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the app | 156d ago |
