| CVE-2026-50015 | 7.3 | — | — | — | pnpm / pnpm | pnpm is a package manager. | 125d ago |
| CVE-2026-9086 | 7.3 | — | — | — | redhat / build of keycloak | A flaw was found in Keycloak. | 125d ago |
| CVE-2026-46734 | 7.3 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation | 125d ago |
| CVE-2026-13201 | 7.3 | — | — | — | kubevirt / kubevirt | A flaw was found in KubeVirt's safepath package used by virt-handler. | 125d ago |
| CVE-2026-54328 | 7.3 | — | — | — | — | Pi is a minimal terminal coding harness. | 126d ago |
| CVE-2026-49401 | 7.3 | — | — | — | deno / deno | Deno is a JavaScript, TypeScript, and WebAssembly runtime. | 127d ago |
| CVE-2026-41046 | 7.3 | — | — | — | presire / qsnapper | A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attac | 128d ago |
| CVE-2026-10845 | 7.3 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unaut | 128d ago |
| CVE-2026-9029 | 7.3 | — | — | — | grafana / grafana | A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile l | 128d ago |
| CVE-2026-12795 | 7.3 | — | — | — | litellm / litellm | A vulnerability was determined in BerriAI litellm up to 1.82.2. | 129d ago |
| CVE-2026-12775 | 7.3 | — | — | — | — | A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. | 129d ago |
| CVE-2026-12773 | 7.3 | — | — | — | litellm / litellm | A weakness has been identified in BerriAI litellm up to 1.59.8. | 129d ago |
| CVE-2026-12530 | 7.3 | — | — | — | — | Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SD | 132d ago |
| CVE-2026-12529 | 7.3 | — | — | — | — | A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analy | 132d ago |
| CVE-2025-69189 | 7.3 | — | — | — | — | Missing Authorization vulnerability in EMV JobBank allows Exploiting Incorrectly Configured Access Control Securit | 133d ago |
| CVE-2026-40768 | 7.3 | — | — | — | — | Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions. | 133d ago |
| CVE-2026-35314 | 7.3 | — | — | — | oracle / access manager | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Server Plugin). | 133d ago |
| CVE-2026-0131 | 7.3 | — | — | — | google / android | In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. | 133d ago |
| CVE-2026-12324 | 7.3 | — | — | — | mozilla / firefox | Incorrect boundary conditions in the Graphics: CanvasWebGL component. | 134d ago |
| CVE-2026-12318 | 7.3 | — | — | — | mozilla / firefox | Incorrect boundary conditions in the Libraries component in NSS. | 134d ago |
| CVE-2026-49063 | 7.3 | — | — | — | — | Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. | 134d ago |
| CVE-2026-40775 | 7.3 | — | — | — | — | Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions. | 134d ago |
| CVE-2026-6040 | 7.3 | — | — | — | — | A heap use-after-free existed when importing the blank-width characters of an ODF number format. | 135d ago |
| CVE-2026-12204 | 7.3 | — | — | — | — | A vulnerability was determined in ShopXO up to 6.7.1. | 135d ago |
| CVE-2026-12200 | 7.3 | — | — | — | — | A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. | 135d ago |
| CVE-2026-12198 | 7.3 | — | — | — | — | A weakness has been identified in Microweber up to 2.0.20. | 135d ago |
| CVE-2026-45011 | 7.3 | — | — | — | — | ApostropheCMS is an open-source Node.js content management system. | 137d ago |
| CVE-2026-12066 | 7.3 | — | — | — | — | A security flaw has been discovered in PbootCMS up to 3.2.12. | 138d ago |
| CVE-2026-48547 | 7.3 | — | — | — | — | KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute ar | 138d ago |
| CVE-2026-48546 | 7.3 | — | — | — | — | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code b | 139d ago |
| CVE-2026-8589 | 7.3 | — | — | — | gitlab / gitlab | GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5 | 139d ago |
| CVE-2026-11417 | 7.3 | — | — | — | — | OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windo | 140d ago |
| CVE-2026-53473 | 7.3 | — | — | — | kubev2v / migration planner ui | A flaw was found in migration-planner-ui-app. | 140d ago |
| CVE-2026-9758 | 7.3 | — | — | — | — | Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificat | 140d ago |
| CVE-2026-11837 | 7.3 | — | — | — | — | A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. | 140d ago |
| CVE-2026-40993 | 7.3 | — | — | — | vmware / spring security | An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_as | 140d ago |
| CVE-2026-47634 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Of | 141d ago |
| CVE-2026-45481 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoin | 141d ago |
| CVE-2026-24181 | 7.3 | — | — | — | — | NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. | 141d ago |
| CVE-2026-24180 | 7.3 | — | — | — | — | NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. | 141d ago |
| CVE-2026-46328 | 7.3 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posi | 141d ago |
| CVE-2026-11618 | 7.3 | — | — | — | — | A vulnerability was determined in DTStack Taier up to 1.4.0. | 141d ago |
| CVE-2026-11582 | 7.3 | — | — | — | — | A flaw has been found in CodeAstro Student Attendance Management System 1.0. | 141d ago |
| CVE-2026-11531 | 7.3 | — | — | — | — | A security flaw has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489 | 142d ago |
| CVE-2026-11530 | 7.3 | — | — | — | — | A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f4 | 142d ago |
| CVE-2026-48913 | 7.3 | — | — | — | apache / http server | Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. | 142d ago |
| CVE-2026-44186 | 7.3 | — | — | — | apache / http server | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Se | 142d ago |
| CVE-2026-44185 | 7.3 | — | — | — | apache / http server | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP ser | 142d ago |
| CVE-2026-11501 | 7.3 | — | — | — | — | A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. | 142d ago |
| CVE-2026-11490 | 7.3 | — | — | — | — | A vulnerability was determined in code-projects Online Music Site 1.0. | 142d ago |
| CVE-2026-11489 | 7.3 | — | — | — | — | A vulnerability was found in code-projects Online Music Site 1.0. | 142d ago |
| CVE-2026-11488 | 7.3 | — | — | — | — | A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. | 142d ago |
| CVE-2026-11486 | 7.3 | — | — | — | — | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
| CVE-2026-11485 | 7.3 | — | — | — | — | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
| CVE-2026-11484 | 7.3 | — | — | — | — | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
| CVE-2026-11483 | 7.3 | — | — | — | — | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
| CVE-2026-11482 | 7.3 | — | — | — | — | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
| CVE-2026-11474 | 7.3 | — | — | — | — | A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176 | 142d ago |
| CVE-2026-11472 | 7.3 | — | — | — | — | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
| CVE-2026-11471 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. | 142d ago |
