| CVE-2026-76940 | 7.5 | — | — | — | — | The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lock | 46d ago |
| CVE-2026-75813 | 7.5 | — | — | — | — | Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to a | 46d ago |
| CVE-2026-75418 | 7.5 | — | — | — | — | A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. | 46d ago |
| CVE-2026-73809 | 7.5 | — | — | — | — | A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. | 46d ago |
| CVE-2026-67560 | 7.5 | — | — | — | — | Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU | 46d ago |
| CVE-2026-38350 | 7.5 | — | — | — | — | An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allow | 46d ago |
| CVE-2026-38349 | 7.5 | — | — | — | — | An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows a | 46d ago |
| CVE-2026-38348 | 7.5 | — | — | — | — | An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a | 46d ago |
| CVE-2026-38347 | 7.5 | — | — | — | — | A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a21 | 46d ago |
| CVE-2026-38346 | 7.5 | — | — | — | — | An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows a | 46d ago |
| CVE-2026-38344 | 7.5 | — | — | — | — | A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e | 46d ago |
| CVE-2026-77438 | 7.5 | — | — | — | — | Trilium is an open-source hierarchical note-taking application. | 46d ago |
| CVE-2026-76640 | 7.5 | — | — | — | — | Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi pr | 46d ago |
| CVE-2026-59289 | 7.5 | — | — | — | vmware / spring for graphql | Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the clie | 46d ago |
| CVE-2026-59282 | 7.5 | — | — | — | vmware / spring framework | Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths | 46d ago |
| CVE-2026-37198 | 7.5 | — | — | — | — | An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via | 46d ago |
| CVE-2026-37012 | 7.5 | — | — | — | — | A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive u | 46d ago |
| CVE-2026-81722 | 7.5 | — | — | — | nltk / nltk | nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial o | 47d ago |
| CVE-2026-81721 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers | 47d ago |
| CVE-2026-81718 | 7.5 | — | — | — | — | openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to p | 47d ago |
| CVE-2026-81705 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is suppl | 47d ago |
| CVE-2026-81704 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.Encry | 47d ago |
| CVE-2026-81699 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, al | 47d ago |
| CVE-2026-81698 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed | 47d ago |
| CVE-2026-81693 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. | 47d ago |
| CVE-2026-81692 | 7.5 | — | — | — | — | openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_sam | 47d ago |
| CVE-2026-81691 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, acc | 47d ago |
| CVE-2026-81689 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 | 47d ago |
| CVE-2026-81688 | 7.5 | — | — | — | jahlives / openssl encrypt | openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header | 47d ago |
| CVE-2026-81678 | 7.5 | — | — | — | — | AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails t | 47d ago |
| CVE-2026-81335 | 7.5 | — | — | — | — | Baserow dispatches an Application Builder data source without acting on the result of its permission check. | 47d ago |
| CVE-2026-80212 | 7.5 | — | — | — | — | An issue was discovered in the resolv gem before 0.7.2 for Ruby. | 47d ago |
| CVE-2026-78002 | 7.5 | — | — | — | — | A flaw was found in rsyslog. | 47d ago |
| CVE-2026-5680 | 7.5 | — | — | — | — | A flaw was found in Undertow. | 47d ago |
| CVE-2026-30073 | 7.5 | — | — | — | — | An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial | 47d ago |
| CVE-2026-30072 | 7.5 | — | — | — | — | A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a Denial of Serv | 47d ago |
| CVE-2026-30071 | 7.5 | — | — | — | — | An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a c | 47d ago |
| CVE-2026-30070 | 7.5 | — | — | — | — | An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) | 47d ago |
| CVE-2026-30069 | 7.5 | — | — | — | — | A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause | 47d ago |
| CVE-2026-30068 | 7.5 | — | — | — | — | Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc v4.0.1 allows atta | 47d ago |
| CVE-2026-30067 | 7.5 | — | — | — | — | An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attack | 47d ago |
| CVE-2026-30064 | 7.5 | — | — | — | — | Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 allows attackers | 47d ago |
| CVE-2026-30063 | 7.5 | — | — | — | — | An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a | 47d ago |
| CVE-2026-30062 | 7.5 | — | — | — | — | An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted N | 47d ago |
| CVE-2026-30060 | 7.5 | — | — | — | — | An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing crafted SUCI data duri | 47d ago |
| CVE-2026-30059 | 7.5 | — | — | — | — | An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a | 47d ago |
| CVE-2026-30058 | 7.5 | — | — | — | — | Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Deni | 47d ago |
| CVE-2026-30057 | 7.5 | — | — | — | — | An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service | 47d ago |
| CVE-2026-30056 | 7.5 | — | — | — | — | A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Deni | 47d ago |
| CVE-2026-30051 | 7.5 | — | — | — | — | An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows attackers to c | 47d ago |
| CVE-2026-30050 | 7.5 | — | — | — | — | An issue in the ModifyAMFEventSubscriptionProcedure function (processor/event_exposure.go) of free5gc v4.1.0 allow | 47d ago |
| CVE-2026-30047 | 7.5 | — | — | — | — | A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows atta | 47d ago |
| CVE-2026-30046 | 7.5 | — | — | — | — | A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denia | 47d ago |
| CVE-2026-30045 | 7.5 | — | — | — | — | An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Deni | 47d ago |
| CVE-2026-26459 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a | 47d ago |
| CVE-2026-26457 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_dump_ | 47d ago |
| CVE-2026-26456 | 7.5 | — | — | — | — | A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e9 | 47d ago |
| CVE-2026-26453 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_serve | 47d ago |
| CVE-2026-26452 | 7.5 | — | — | — | — | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a | 47d ago |
| CVE-2026-81575 | 7.5 | — | — | — | — | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, whi | 47d ago |
