| CVE-2026-59646 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. | 70d ago |
| CVE-2026-59645 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 sch | 70d ago |
| CVE-2026-59644 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender. | 70d ago |
| CVE-2026-59642 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. | 70d ago |
| CVE-2026-59639 | 7.5 | — | — | — | bouncycastle / bc-java | In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. | 70d ago |
| CVE-2026-3245 | 7.5 | — | — | — | — | A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code executio | 70d ago |
| CVE-2026-68580 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) acr | 71d ago |
| CVE-2026-68578 | 7.5 | — | — | — | — | ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all en | 71d ago |
| CVE-2026-67357 | 7.5 | — | — | — | — | ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings too | 71d ago |
| CVE-2026-16540 | 7.5 | — | — | — | — | The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment o | 71d ago |
| CVE-2026-16285 | 7.5 | — | — | — | — | The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check befo | 71d ago |
| CVE-2026-16261 | 7.5 | — | — | — | — | The login-social WordPress plugin through 1.0.4 does not validate password-reset requests against a reset key or t | 71d ago |
| CVE-2026-15241 | 7.5 | — | — | — | — | The AI ChatBot for WooCommerce WordPress plugin before 4.8.4 does not perform any authorization or nonce check on | 71d ago |
| CVE-2026-15236 | 7.5 | — | — | — | — | The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to the stored third- | 71d ago |
| CVE-2026-15206 | 7.5 | — | — | — | — | The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number t | 71d ago |
| CVE-2026-15151 | 7.5 | — | — | — | — | The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of | 71d ago |
| CVE-2026-18352 | 7.5 | — | — | — | — | The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu | 71d ago |
| CVE-2026-13339 | 7.5 | — | — | — | — | The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includin | 71d ago |
| CVE-2026-55735 | 7.5 | — | — | — | ueberauth / guardian | Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revok | 72d ago |
| CVE-2026-55734 | 7.5 | — | — | — | ueberauth / guardian | Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions mod | 72d ago |
| CVE-2026-55733 | 7.5 | — | — | — | ueberauth / guardian | Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded | 72d ago |
| CVE-2026-54894 | 7.5 | — | — | — | ueberauth / guardian | Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded | 72d ago |
| CVE-2026-67322 | 7.5 | — | — | — | gitpython project / gitpython | GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). | 72d ago |
| CVE-2026-67321 | 7.5 | — | — | — | axios / axios | axios versions 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 contain an incomplete depth-limit bypass in toFormDat | 72d ago |
| CVE-2026-67320 | 7.5 | — | — | — | axios / axios | axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. | 72d ago |
| CVE-2026-67317 | 7.5 | — | — | — | axios / axios | axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the f | 72d ago |
| CVE-2026-67315 | 7.5 | — | — | — | axios / axios | axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in sh | 72d ago |
| CVE-2026-67313 | 7.5 | — | — | — | axios / axios | axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field na | 72d ago |
| CVE-2026-67312 | 7.5 | — | — | — | axios / axios | axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataTo | 72d ago |
| CVE-2026-67304 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanu | 72d ago |
| CVE-2026-67301 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the Polygo | 72d ago |
| CVE-2026-67300 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy f | 72d ago |
| CVE-2026-67299 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON | 72d ago |
| CVE-2026-67298 | 7.5 | — | — | — | — | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_s | 72d ago |
| CVE-2026-67297 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP res | 72d ago |
| CVE-2026-67296 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to | 72d ago |
| CVE-2026-67291 | 7.5 | — | — | — | freerdp / freerdp | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fra | 72d ago |
| CVE-2026-67290 | 7.5 | — | — | — | — | FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC | 72d ago |
| CVE-2026-67288 | 7.5 | — | — | — | freerdp / freerdp | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that a | 72d ago |
| CVE-2026-18536 | 7.5 | — | — | — | rrwo / data\ | Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. | 72d ago |
| CVE-2026-14839 | 7.5 | — | — | — | — | The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a pu | 72d ago |
| CVE-2026-15006 | 7.5 | — | — | — | — | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress i | 72d ago |
| CVE-2026-62999 | 7.5 | — | — | — | — | Copier is a library and CLI app for rendering project templates. | 73d ago |
| CVE-2026-53599 | 7.5 | — | — | — | — | REDAXO is a PHP-based content management system. | 73d ago |
| CVE-2026-53505 | 7.5 | — | — | — | — | Thumbor is an open-source photo thumbnail service by globo.com. | 73d ago |
| CVE-2026-53504 | 7.5 | — | — | — | — | Thumbor is an open-source photo thumbnail service by globo.com. | 73d ago |
| CVE-2026-53503 | 7.5 | — | — | — | — | Thumbor is an open-source photo thumbnail service by globo.com. | 73d ago |
| CVE-2026-52856 | 7.5 | — | — | — | — | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. | 73d ago |
| CVE-2026-17347 | 7.5 | — | — | — | pgadmin / pgadmin 4 | The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command | 73d ago |
| CVE-2026-18446 | 7.5 | — | — | — | openjsf / fast-uri | fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a | 73d ago |
| CVE-2026-18358 | 7.5 | — | — | — | — | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. | 73d ago |
| CVE-2026-15722 | 7.5 | — | — | — | redhat / directory server | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). | 73d ago |
| CVE-2026-11770 | 7.5 | — | — | — | redhat / directory server | A flaw was found in 389 Directory Server. | 73d ago |
| CVE-2026-65310 | 7.5 | — | — | — | — | ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and c | 73d ago |
| CVE-2026-65309 | 7.5 | — | — | — | — | ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversibl | 73d ago |
| CVE-2026-15048 | 7.5 | — | — | — | — | The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, al | 73d ago |
| CVE-2026-14930 | 7.5 | — | — | — | — | The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a | 73d ago |
| CVE-2026-14830 | 7.5 | — | — | — | — | The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment processor that a checkout session was ac | 73d ago |
| CVE-2026-14333 | 7.5 | — | — | — | — | The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location unde | 73d ago |
| CVE-2026-14319 | 7.5 | — | — | — | — | The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns re | 73d ago |
