| CVE-2026-56029 | 7.5 | — | — | — | — | Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions. | 107d ago |
| CVE-2026-56025 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. | 107d ago |
| CVE-2026-54847 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions. | 107d ago |
| CVE-2026-54846 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions. | 107d ago |
| CVE-2026-54839 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Trinity Backup – Backup, Migrate, Restore, Clone & Schedule B | 107d ago |
| CVE-2026-54837 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions | 107d ago |
| CVE-2026-54835 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. | 107d ago |
| CVE-2026-54834 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. | 107d ago |
| CVE-2026-54832 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. | 107d ago |
| CVE-2026-54824 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. | 107d ago |
| CVE-2026-30041 | 7.5 | — | — | — | — | An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrar | 107d ago |
| CVE-2025-68064 | 7.5 | — | — | — | — | Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions. | 107d ago |
| CVE-2025-68063 | 7.5 | — | — | — | — | Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 | 107d ago |
| CVE-2026-57913 | 7.5 | — | — | — | — | Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and | 107d ago |
| CVE-2026-57912 | 7.5 | — | — | — | — | Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and n | 107d ago |
| CVE-2026-11702 | 7.5 | — | — | — | — | Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. | 107d ago |
| CVE-2026-11625 | 7.5 | — | — | — | — | Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. | 107d ago |
| CVE-2026-57876 | 7.5 | — | — | — | — | An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1 | 107d ago |
| CVE-2026-57875 | 7.5 | — | — | — | — | An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI | 107d ago |
| CVE-2026-57874 | 7.5 | — | — | — | — | An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC | 107d ago |
| CVE-2026-57873 | 7.5 | — | — | — | — | An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 a | 107d ago |
| CVE-2026-57872 | 7.5 | — | — | — | — | An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC221 | 107d ago |
| CVE-2026-49486 | 7.5 | — | — | — | apache / apache-airflow-providers-ftp | The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `p | 107d ago |
| CVE-2026-10823 | 7.5 | — | — | — | — | The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints | 107d ago |
| CVE-2026-48933 | 7.5 | — | — | — | nodejs / node.js | A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple | 108d ago |
| CVE-2026-48619 | 7.5 | — | — | — | nodejs / node.js | A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to | 108d ago |
| CVE-2026-48615 | 7.5 | — | — | — | nodejs / node.js | A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. | 108d ago |
| CVE-2026-9221 | 7.5 | — | — | — | — | The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a reque | 108d ago |
| CVE-2026-9220 | 7.5 | — | — | — | — | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch | 108d ago |
| CVE-2026-8720 | 7.5 | — | — | — | wolfssl / wolfssl | wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, produci | 108d ago |
| CVE-2026-7532 | 7.5 | — | — | — | wolfssl / wolfssl | iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. | 108d ago |
| CVE-2026-7511 | 7.5 | — | — | — | wolfssl / wolfssl | PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correct | 108d ago |
| CVE-2026-6331 | 7.5 | — | — | — | wolfssl / wolfssl | HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HM | 108d ago |
| CVE-2026-6325 | 7.5 | — | — | — | wolfssl / wolfssl | Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a writ | 108d ago |
| CVE-2026-50176 | 7.5 | — | — | — | — | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. | 108d ago |
| CVE-2026-13283 | 7.5 | — | — | — | google / chrome | Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convi | 108d ago |
| CVE-2026-11703 | 7.5 | — | — | — | wolfssl / wolfssl | Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed | 108d ago |
| CVE-2025-71324exploited | 7.5 | 1.6% | 1/3 | +38d | flowiseai / flowise | Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-uplo | 108d ago |
| CVE-2021-47987 | 7.5 | — | — | — | — | Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to | 108d ago |
| CVE-2021-47986 | 7.5 | — | — | — | parseplatform / parse-server | Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the r | 108d ago |
| CVE-2026-6731 | 7.5 | — | — | — | wolfssl / wolfssl | X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. | 108d ago |
| CVE-2026-6679 | 7.5 | — | — | — | wolfssl / wolfssl | A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticat | 108d ago |
| CVE-2026-38640 | 7.5 | — | — | — | — | A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to caus | 108d ago |
| CVE-2026-38637 | 7.5 | — | — | — | — | An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denia | 108d ago |
| CVE-2026-37452 | 7.5 | — | — | — | — | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain | 108d ago |
| CVE-2026-55960 | 7.5 | — | — | — | wolfssl / wolfssl | Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. | 108d ago |
| CVE-2026-55958 | 7.5 | — | — | — | wolfssl / wolfssl | Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. | 108d ago |
| CVE-2026-46602 | 7.5 | — | — | — | — | The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt imag | 108d ago |
| CVE-2026-46601 | 7.5 | — | — | — | — | The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. | 108d ago |
| CVE-2026-37454 | 7.5 | — | — | — | msi / center | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain | 108d ago |
| CVE-2026-37453 | 7.5 | — | — | — | msi / center | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain | 108d ago |
| CVE-2026-12340 | 7.5 | — | — | — | wolfssl / wolfssl | Out-of-bounds heap read during SM2/SM3 certificate signature verification. | 108d ago |
| CVE-2026-11310 | 7.5 | — | — | — | wolfssl / wolfssl | X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). | 108d ago |
| CVE-2026-10512 | 7.5 | — | — | — | wolfssl / wolfssl | The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reducti | 108d ago |
| CVE-2026-10097 | 7.5 | — | — | — | wolfssl / wolfssl | wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes du | 108d ago |
| CVE-2026-56770 | 7.5 | — | — | — | — | libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sent | 108d ago |
| CVE-2026-54094 | 7.5 | — | — | — | — | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within | 108d ago |
| CVE-2026-54091 | 7.5 | — | — | — | — | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within | 108d ago |
| CVE-2026-55967 | 7.5 | — | — | — | wolfssl / wolfssl | AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rej | 108d ago |
| CVE-2026-55961 | 7.5 | — | — | — | wolfssl / wolfssl | wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer. | 108d ago |
