| CVE-2026-73232 | 7.5 | — | — | — | — | ffuf is a fast web fuzzer written in Go. | 62d ago |
| CVE-2026-71467 | 7.5 | — | — | — | — | A flaw was found in search-v2-api. | 62d ago |
| CVE-2026-48804 | 7.5 | — | — | — | — | python-socketio is a Python implementation of the Socket.IO realtime client and server. | 62d ago |
| CVE-2026-13457 | 7.5 | — | — | — | — | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution i | 62d ago |
| CVE-2026-48809 | 7.5 | — | — | — | — | python-engineio is a Python implementation of the Engine.IO realtime client and server. | 62d ago |
| CVE-2026-48802 | 7.5 | — | — | — | — | python-engineio is a Python implementation of the Engine.IO realtime client and server. | 62d ago |
| CVE-2026-18697 | 7.5 | — | — | — | — | An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) | 62d ago |
| CVE-2026-72713 | 7.5 | — | — | — | — | XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or defau | 62d ago |
| CVE-2026-48416 | 7.5 | — | — | — | — | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature byp | 62d ago |
| CVE-2022-50997zero day | 7.5 | 0.62% | 1/3 | same day | — | Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpo | 62d ago |
| CVE-2016-20097zero day | 7.5 | 0.63% | 1/3 | same day | — | Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows u | 62d ago |
| CVE-2026-73089 | 7.5 | — | — | — | — | Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. | 62d ago |
| CVE-2026-73088 | 7.5 | — | — | — | — | Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. | 62d ago |
| CVE-2026-65681 | 7.5 | — | — | — | microsoft / windows 10 1607 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a ne | 62d ago |
| CVE-2026-62901 | 7.5 | — | — | — | microsoft / visual studio 2022 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | 62d ago |
| CVE-2026-62898 | 7.5 | — | — | — | microsoft / visual studio 2022 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 62d ago |
| CVE-2026-62787 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. | 62d ago |
| CVE-2026-61363 | 7.5 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 62d ago |
| CVE-2026-61352 | 7.5 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Clie | 62d ago |
| CVE-2026-59134 | 7.5 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 62d ago |
| CVE-2026-59132 | 7.5 | — | — | — | microsoft / windows 10 1607 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. | 62d ago |
| CVE-2026-54113 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny ser | 62d ago |
| CVE-2026-48439 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to appli | 62d ago |
| CVE-2026-48438 | 7.5 | — | — | — | adobe / c2pa | CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an applicatio | 62d ago |
| CVE-2026-48386 | 7.5 | — | — | — | adobe / coldfusion | ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disc | 62d ago |
| CVE-2026-18125 | 7.5 | — | — | — | — | An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthentica | 62d ago |
| CVE-2026-72766 | 7.5 | — | — | — | n8n / n8n | n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Sen | 62d ago |
| CVE-2026-69109 | 7.5 | — | — | — | — | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). | 62d ago |
| CVE-2026-72606 | 7.5 | — | — | — | — | A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to mak | 62d ago |
| CVE-2026-72605 | 7.5 | — | — | — | — | A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbi | 62d ago |
| CVE-2026-72602 | 7.5 | — | — | — | — | A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote a | 62d ago |
| CVE-2026-72601 | 7.5 | — | — | — | — | A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form su | 62d ago |
| CVE-2026-72600 | 7.5 | — | — | — | — | A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to do | 62d ago |
| CVE-2026-72552 | 7.5 | — | — | — | — | A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to mak | 62d ago |
| CVE-2026-72548 | 7.5 | — | — | — | — | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote atta | 62d ago |
| CVE-2026-72545 | 7.5 | — | — | — | — | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated r | 62d ago |
| CVE-2026-72544 | 7.5 | — | — | — | — | An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote atta | 62d ago |
| CVE-2026-72543 | 7.5 | — | — | — | — | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated r | 62d ago |
| CVE-2026-71217 | 7.5 | — | — | — | — | A flaw was found in iperf3. | 62d ago |
| CVE-2026-15567 | 7.5 | — | — | — | — | A flaw was found in Wildfly. | 62d ago |
| CVE-2026-15565 | 7.5 | — | — | — | — | A flaw was found in Undertow. | 62d ago |
| CVE-2026-15562 | 7.5 | — | — | — | — | A flaw was found in EAP's jboss-remoting. | 62d ago |
| CVE-2026-15561 | 7.5 | — | — | — | — | A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. | 62d ago |
| CVE-2026-19424 | 7.5 | — | — | — | — | Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. | 63d ago |
| CVE-2026-72915 | 7.5 | — | — | — | — | Mastodon is a free, open-source social network server based on ActivityPub. | 63d ago |
| CVE-2026-72914 | 7.5 | — | — | — | — | Mastodon is a free, open-source social network server based on ActivityPub. | 63d ago |
| CVE-2026-18618 | 7.5 | — | — | — | — | A flaw was found in ml-metadata. | 63d ago |
| CVE-2026-18611 | 7.5 | — | — | — | — | A flaw was found in the Data Science Pipelines Operator. | 63d ago |
| CVE-2026-11810 | 7.5 | — | — | — | — | The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c | 63d ago |
| CVE-2026-72871 | 7.5 | — | — | — | — | Dokploy is a free, self-hostable Platform as a Service (PaaS). | 63d ago |
| CVE-2026-71962 | 7.5 | — | — | — | flowiseai / flowise | Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assi | 63d ago |
| CVE-2026-48048 | 7.5 | — | — | — | — | XWiki Platform is a generic wiki platform. | 63d ago |
| CVE-2026-72692 | 7.5 | — | — | — | — | A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remo | 63d ago |
| CVE-2026-72691 | 7.5 | — | — | — | — | An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated rem | 63d ago |
| CVE-2026-72689 | 7.5 | — | — | — | — | A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthen | 63d ago |
| CVE-2026-72688 | 7.5 | — | — | — | — | A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated rem | 63d ago |
| CVE-2026-68414 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work | 63d ago |
| CVE-2026-68379 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PS | 63d ago |
| CVE-2026-68315 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_st | 63d ago |
| CVE-2026-68299 | 7.5 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() f | 63d ago |
