| CVE-2026-33862 | 7.3 | — | — | — | siemens / teamcenter | A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All version | 169d ago |
| CVE-2026-43914 | 7.3 | — | — | — | dani-garcia / vaultwarden | Vaultwarden is a Bitwarden-compatible server written in Rust. | 169d ago |
| CVE-2026-43887 | 7.3 | — | — | — | — | Outline is a service that allows for collaborative documentation. | 169d ago |
| CVE-2026-43656 | 7.3 | — | — | — | apple / ipados | An out-of-bounds write issue was addressed with improved input validation. | 169d ago |
| CVE-2026-43655 | 7.3 | — | — | — | apple / ipados | An out-of-bounds read was addressed with improved bounds checking. | 169d ago |
| CVE-2026-37630 | 7.3 | — | — | — | — | An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark func | 169d ago |
| CVE-2026-8321 | 7.3 | — | — | — | — | A vulnerability was detected in inkeep agents 0.58.14. | 169d ago |
| CVE-2022-4988 | 7.3 | — | — | — | — | Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries. | 169d ago |
| CVE-2026-8305 | 7.3 | — | — | — | openclaw / openclaw | A vulnerability was detected in OpenClaw up to 2026.1.24. | 170d ago |
| CVE-2026-5172 | 7.3 | — | — | — | — | A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read | 170d ago |
| CVE-2026-44995 | 7.3 | — | — | — | openclaw / openclaw | OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server c | 170d ago |
| CVE-2026-36983 | 7.3 | — | — | — | dlink / dcs-932l firmware | D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. | 170d ago |
| CVE-2026-36962 | 7.3 | — | — | — | — | SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, a | 170d ago |
| CVE-2026-2291 | 7.3 | — | — | — | — | dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject fals | 170d ago |
| CVE-2026-31254 | 7.3 | — | — | — | — | The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code inje | 170d ago |
| CVE-2026-31253 | 7.3 | — | — | — | — | The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains | 170d ago |
| CVE-2026-31251 | 7.3 | — | — | — | — | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization v | 170d ago |
| CVE-2026-31250 | 7.3 | — | — | — | — | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization v | 170d ago |
| CVE-2026-31249 | 7.3 | — | — | — | — | CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization v | 170d ago |
| CVE-2025-61314 | 7.3 | — | — | — | — | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed | 170d ago |
| CVE-2025-61313 | 7.3 | — | — | — | — | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Mana | 170d ago |
| CVE-2025-61312 | 7.3 | — | — | — | — | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed P | 170d ago |
| CVE-2025-61311 | 7.3 | — | — | — | — | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Pr | 170d ago |
| CVE-2025-10908 | 7.3 | — | — | — | wso2 / identity server | Due to a lack of user account state validation during authentication, locked user accounts can be successfully aut | 170d ago |
| CVE-2026-6433exploited | 7.3 | 1.2% | 1/3 | +43d | — | The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL | 170d ago |
| CVE-2026-8216 | 7.3 | — | — | — | — | A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. | 171d ago |
| CVE-2026-4632 | 7.3 | — | — | — | — | A weakness has been identified in itsourcecode Online Enrollment System 1.0. | 218d ago |
| CVE-2026-4625 | 7.3 | — | — | — | — | A flaw has been found in SourceCodester Online Admission System 1.0. | 218d ago |
| CVE-2026-4624 | 7.3 | — | — | — | — | A vulnerability was detected in SourceCodester Online Library Management System 1.0. | 218d ago |
| CVE-2026-4623 | 7.3 | — | — | — | — | A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b | 218d ago |
| CVE-2026-4617 | 7.3 | — | — | — | — | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. | 218d ago |
| CVE-2026-4615 | 7.3 | — | — | — | — | A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. | 218d ago |
| CVE-2026-4613 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester E-Commerce Site 1.0. | 218d ago |
| CVE-2026-4612 | 7.3 | — | — | — | — | A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. | 218d ago |
| CVE-2026-4594 | 7.3 | — | — | — | — | A vulnerability has been found in erupts erupt up to 1.13.3. | 219d ago |
| CVE-2025-15605 | 7.3 | — | — | — | tp-link / archer nx600 firmware | A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 e | 219d ago |
| CVE-2026-33492 | 7.3 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 219d ago |
| CVE-2026-4581 | 7.3 | — | — | — | code-projects / simple laundry system | A weakness has been identified in code-projects Simple Laundry System 1.0. | 219d ago |
| CVE-2026-4580 | 7.3 | — | — | — | code-projects / simple laundry system | A security flaw has been discovered in code-projects Simple Laundry System 1.0. | 219d ago |
| CVE-2026-4579 | 7.3 | — | — | — | code-projects / simple laundry system | A vulnerability was identified in code-projects Simple Laundry System 1.0. | 219d ago |
| CVE-2025-10679 | 7.3 | — | — | — | — | The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plug | 219d ago |
| CVE-2026-4562 | 7.3 | — | — | — | — | A security flaw has been discovered in MacCMS 2025.1000.4052. | 219d ago |
| CVE-2026-4540 | 7.3 | — | — | — | — | A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. | 220d ago |
| CVE-2026-4536 | 7.3 | — | — | — | — | A vulnerability was found in Acrel Environmental Monitoring Cloud Platform 1.1.0. | 220d ago |
| CVE-2026-4528 | 7.3 | — | — | — | — | A vulnerability was determined in trueleaf ApiFlow 0.9.7. | 220d ago |
| CVE-2026-4508 | 7.3 | — | — | — | — | A vulnerability was identified in PbootCMS up to 3.2.12. | 221d ago |
| CVE-2026-32663 | 7.3 | — | — | — | igl / eparking.fi | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoin | 221d ago |
| CVE-2026-27649 | 7.3 | — | — | — | ctek / charge portal | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoin | 221d ago |
| CVE-2026-33147 | 7.3 | — | — | — | generic-mapping-tools / gmt | GMT is an open source collection of command-line tools for manipulating geographic and Cartesian data sets. | 221d ago |
| CVE-2026-4504 | 7.3 | — | — | — | — | A flaw has been found in eosphoros-ai db-gpt up to 0.7.5. | 221d ago |
| CVE-2026-4499 | 7.3 | — | — | — | dlink / dir-820lw firmware | A vulnerability was determined in D-Link DIR-820LW 2.03. | 221d ago |
| CVE-2026-4497 | 7.3 | — | — | — | totolink / wa300 firmware | A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. | 221d ago |
| CVE-2026-33080 | 7.3 | — | — | — | filamentphp / filament | Filament is a collection of full-stack components for accelerated Laravel development. | 222d ago |
| CVE-2025-69720 | 7.3 | — | — | — | invisible-island / ncurses | The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string i | 223d ago |
| CVE-2025-71257exploited | 7.3 | 44.6% | 1/3 | +13d | bmc / footprints | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to i | 223d ago |
| CVE-2026-2991 | 7.3 | — | — | — | — | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass | 224d ago |
| CVE-2026-4319 | 7.3 | — | — | — | carmelo / simple food order system | A vulnerability was identified in code-projects Simple Food Order System 1.0. | 225d ago |
| CVE-2026-4289 | 7.3 | — | — | — | — | A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. | 225d ago |
| CVE-2026-4288 | 7.3 | — | — | — | — | A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. | 225d ago |
| CVE-2026-4287 | 7.3 | — | — | — | — | A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. | 225d ago |
