| CVE-2026-9517 | 7.3 | — | — | — | — | A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. | 155d ago |
| CVE-2026-9474 | 7.3 | — | — | — | — | A vulnerability was found in yashpokharna2555 StudentManagementSystem up to cb2f558ddf8d19396de0f92abf2d224d46a0a20 | 156d ago |
| CVE-2026-9470 | 7.3 | — | — | — | — | A security vulnerability has been detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d | 156d ago |
| CVE-2026-9469 | 7.3 | — | — | — | — | A weakness has been identified in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203 | 156d ago |
| CVE-2026-9465 | 7.3 | — | — | — | — | A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. | 156d ago |
| CVE-2026-9453 | 7.3 | — | — | — | — | A vulnerability was detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. | 156d ago |
| CVE-2026-9452 | 7.3 | — | — | — | — | A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. | 156d ago |
| CVE-2026-9447 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. | 156d ago |
| CVE-2026-9422 | 7.3 | — | — | — | — | A vulnerability was identified in KLiK SocialMediaWebsite 1.0. | 156d ago |
| CVE-2026-9421 | 7.3 | — | — | — | — | A vulnerability was determined in KLiK SocialMediaWebsite 1.0. | 156d ago |
| CVE-2026-9383 | 7.3 | — | — | — | — | A vulnerability has been found in itsourcecode Electronic Judging System 1.0. | 157d ago |
| CVE-2026-9372 | 7.3 | — | — | — | — | A flaw has been found in ItzCrazyKns Vane up to 1.12.1. | 157d ago |
| CVE-2026-9368 | 7.3 | — | — | — | — | A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. | 157d ago |
| CVE-2026-9367 | 7.3 | — | — | — | — | A vulnerability was determined in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63. | 157d ago |
| CVE-2026-9366 | 7.3 | — | — | — | — | A vulnerability was found in NousResearch hermes-agent 2026.4.23. | 157d ago |
| CVE-2026-9364 | 7.3 | — | — | — | — | A flaw has been found in projectworlds Online Art Gallery Shop 1.0. | 157d ago |
| CVE-2026-9356 | 7.3 | — | — | — | — | A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. | 157d ago |
| CVE-2026-9355 | 7.3 | — | — | — | — | A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. | 157d ago |
| CVE-2026-9353 | 7.3 | — | — | — | — | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. | 157d ago |
| CVE-2026-9350 | 7.3 | — | — | — | — | A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. | 157d ago |
| CVE-2026-37470 | 7.3 | — | — | — | — | An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, l | 159d ago |
| CVE-2026-36228 | 7.3 | — | — | — | — | Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and | 159d ago |
| CVE-2026-43497 | 7.3 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to p | 160d ago |
| CVE-2026-24206 | 7.3 | — | — | — | nvidia / triton inference server | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. | 161d ago |
| CVE-2026-39250 | 7.3 | — | — | — | — | An authorization vulnerability exists in Innoshop 0.6.0. | 161d ago |
| CVE-2025-70950 | 7.3 | — | — | — | — | An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request | 162d ago |
| CVE-2025-51427 | 7.3 | — | — | — | — | An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module liste | 162d ago |
| CVE-2026-8947 | 7.3 | — | — | — | mozilla / firefox | Use-after-free in the DOM: Bindings (WebIDL) component. | 162d ago |
| CVE-2026-29226 | 7.3 | — | — | — | apache / ofbiz | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations. | 162d ago |
| CVE-2026-32323 | 7.3 | — | — | — | mullvad / mullvad vpn | Mullvad VPN is a VPN client app for desktop and mobile. | 162d ago |
| CVE-2026-26462 | 7.3 | — | — | — | — | Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configu | 163d ago |
| CVE-2026-8788 | 7.3 | — | — | — | — | Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. | 163d ago |
| CVE-2026-8785 | 7.3 | — | — | — | — | A flaw has been found in projectworlds hospital-management-system-in-php 1.0. | 163d ago |
| CVE-2026-8771 | 7.3 | — | — | — | — | A security flaw has been discovered in linlinjava litemall up to 1.8.0. | 163d ago |
| CVE-2026-8768 | 7.3 | — | — | — | vercel / ai | A vulnerability was found in vercel ai up to 3.0.97. | 163d ago |
| CVE-2026-8759 | 7.3 | — | — | — | — | A vulnerability was identified in xiandafu beetl up to 3.20.2. | 164d ago |
| CVE-2026-8758 | 7.3 | — | — | — | — | A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. | 164d ago |
| CVE-2026-8757 | 7.3 | — | — | — | adenhq / hive | A vulnerability was found in adenhq hive up to 0.11.0. | 164d ago |
| CVE-2026-8756 | 7.3 | — | — | — | — | A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. | 164d ago |
| CVE-2026-8755 | 7.3 | — | — | — | — | A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. | 164d ago |
| CVE-2026-8751 | 7.3 | — | — | — | h2o / h2o | A security flaw has been discovered in h2oai h2o-3 up to 7402. | 164d ago |
| CVE-2026-8734 | 7.3 | — | — | — | — | A vulnerability was determined in Oinone Pamirs up to 7.2.0. | 164d ago |
| CVE-2026-8725 | 7.3 | — | — | — | — | A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. | 164d ago |
| CVE-2026-8700 | 7.3 | — | — | — | — | Crypt::DSA versions before 1.20 for Perl generate seeds using rand. | 165d ago |
| CVE-2026-44567 | 7.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 165d ago |
| CVE-2026-44566 | 7.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 165d ago |
| CVE-2026-44549 | 7.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 165d ago |
| CVE-2026-44721 | 7.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 165d ago |
| CVE-2026-39054 | 7.3 | — | — | — | — | Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. | 166d ago |
| CVE-2026-24712 | 7.3 | — | — | — | northern.tech / cfengine | Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection. | 167d ago |
| CVE-2025-27853 | 7.3 | — | — | — | garmin / empirbus wireless display unit firmware | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. | 167d ago |
| CVE-2026-42584 | 7.3 | — | — | — | netty / netty | Netty is an asynchronous, event-driven network application framework. | 167d ago |
| CVE-2024-55045 | 7.3 | — | — | — | — | Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_ent | 168d ago |
| CVE-2026-37430 | 7.3 | — | — | — | — | An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a | 168d ago |
| CVE-2026-35433 | 7.3 | — | — | — | microsoft / .net framework | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | 169d ago |
| CVE-2026-32177 | 7.3 | — | — | — | microsoft / visual studio 2022 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | 169d ago |
| CVE-2026-5089 | 7.3 | — | — | — | — | YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. | 169d ago |
| CVE-2026-42498 | 7.3 | — | — | — | apache / tomcat | Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache | 169d ago |
| CVE-2026-43939 | 7.3 | — | — | — | — | YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. | 169d ago |
| CVE-2026-8390 | 7.3 | — | — | — | mozilla / firefox | Use-after-free in the JavaScript: WebAssembly component. | 169d ago |
