| CVE-2018-25366 | 8.4 | — | — | — | — | CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by i | 155d ago |
| CVE-2018-25360 | 8.4 | — | — | — | — | AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name fi | 155d ago |
| CVE-2018-25359 | 8.4 | — | — | — | — | Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privile | 155d ago |
| CVE-2018-25356 | 8.4 | — | — | — | — | SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows | 157d ago |
| CVE-2018-25355 | 8.4 | — | — | — | — | Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code b | 157d ago |
| CVE-2018-25345 | 8.4 | — | — | — | — | 10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows at | 157d ago |
| CVE-2018-25344 | 8.4 | — | — | — | — | 10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration | 157d ago |
| CVE-2026-2740 | 8.4 | — | — | — | — | Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plu | 159d ago |
| CVE-2026-45253 | 8.4 | — | — | — | freebsd / freebsd | ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. | 160d ago |
| CVE-2026-9157 | 8.4 | — | — | — | — | Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows | 160d ago |
| CVE-2026-5804 | 8.4 | — | — | — | — | An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motoci | 161d ago |
| CVE-2026-25781 | 8.4 | — | — | — | — | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. | 162d ago |
| CVE-2018-25328 | 8.4 | — | — | — | — | VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instructio | 163d ago |
| CVE-2018-25323 | 8.4 | — | — | — | — | Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerabilit | 163d ago |
| CVE-2018-25322 | 8.4 | — | — | — | — | Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers | 163d ago |
| CVE-2026-41964 | 8.4 | — | — | — | — | Permission control vulnerability in the web. | 166d ago |
| CVE-2020-37221 | 8.4 | — | — | — | — | Atomic Alarm Clock 6.3 contains a stack overflow vulnerability that allows local attackers to execute arbitrary co | 167d ago |
| CVE-2026-25705 | 8.4 | — | — | — | — | A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations | 168d ago |
| CVE-2026-40367 | 8.4 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized atta | 168d ago |
| CVE-2026-40366 | 8.4 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized atta | 168d ago |
| CVE-2026-40364 | 8.4 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized atta | 168d ago |
| CVE-2026-40363 | 8.4 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 168d ago |
| CVE-2026-40361 | 8.4 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 168d ago |
| CVE-2026-40358 | 8.4 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 168d ago |
| CVE-2026-43991 | 8.4 | — | — | — | — | JunoClaw is an agentic AI platform built on Juno Network. | 168d ago |
| CVE-2026-43990 | 8.4 | — | — | — | — | JunoClaw is an agentic AI platform built on Juno Network. | 168d ago |
| CVE-2026-34963 | 8.4 | — | — | — | pengutronix / barebox | barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loa | 169d ago |
| CVE-2026-4892 | 8.4 | — | — | — | — | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to ex | 169d ago |
| CVE-2019-25637 | 8.4 | — | — | — | — | X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary | 217d ago |
| CVE-2019-25634 | 8.4 | — | — | — | 4mhz / base64 decoder | Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute a | 217d ago |
| CVE-2019-25633 | 8.4 | — | — | — | aida64 / aida64 | AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local | 217d ago |
| CVE-2019-25631 | 8.4 | — | — | — | aida64 / aida64 | AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local | 217d ago |
| CVE-2019-25629 | 8.4 | — | — | — | aida64 / aida64 | AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging func | 217d ago |
| CVE-2019-25627 | 8.4 | — | — | — | flexhex / flexhex | FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers t | 217d ago |
| CVE-2019-25626 | 8.4 | — | — | — | river past cam do project / river past cam do | River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that all | 217d ago |
| CVE-2026-32845 | 8.4 | — | — | — | — | cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when valid | 218d ago |
| CVE-2019-25619 | 8.4 | — | — | — | ftpshell / ftpshell server | FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows loca | 219d ago |
| CVE-2019-25615 | 8.4 | — | — | — | — | Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows loc | 219d ago |
| CVE-2019-25611 | 8.4 | — | — | — | — | MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attacker | 219d ago |
| CVE-2019-25609 | 8.4 | — | — | — | — | JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuratio | 219d ago |
| CVE-2019-25608 | 8.4 | — | — | — | — | Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbi | 219d ago |
| CVE-2019-25607 | 8.4 | — | — | — | — | Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attac | 219d ago |
| CVE-2019-25604 | 8.4 | — | — | — | — | DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows l | 219d ago |
| CVE-2019-25603 | 8.4 | — | — | — | — | TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attac | 219d ago |
| CVE-2026-28520 | 8.4 | — | — | — | tuya / arduino-tuyaopen | arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti compon | 225d ago |
| CVE-2026-28793 | 8.4 | — | — | — | ssw / tinacms\/cli | Tina is a headless content management system. | 229d ago |
| CVE-2019-25483 | 8.4 | — | — | — | — | Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows lo | 230d ago |
| CVE-2019-25467 | 8.4 | — | — | — | — | Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local | 230d ago |
| CVE-2019-25466 | 8.4 | — | — | — | — | Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that | 230d ago |
| CVE-2026-52771 | 8.3 | — | — | — | — | YesWiki is a wiki system written in PHP. | 53d ago |
| CVE-2026-52769 | 8.3 | — | — | — | — | YesWiki is a wiki system written in PHP. | 53d ago |
| CVE-2026-85048 | 8.3 | — | — | — | — | Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromise | 54d ago |
| CVE-2026-85212 | 8.3 | — | — | — | — | CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that re | 54d ago |
| CVE-2026-82404 | 8.3 | — | — | — | — | TOON is a compact, human-readable serialization of JSON data for LLM prompts. | 55d ago |
| CVE-2026-45730 | 8.3 | — | — | — | — | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. | 55d ago |
| CVE-2026-77180 | 8.3 | — | — | — | — | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the con | 55d ago |
| CVE-2026-84351 | 8.3 | — | — | — | google / chrome | Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had com | 56d ago |
| CVE-2026-84349 | 8.3 | — | — | — | google / chrome | Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised th | 56d ago |
| CVE-2026-84335 | 8.3 | — | — | — | google / chrome | Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had comp | 56d ago |
| CVE-2026-73780 | 8.3 | — | — | — | hpe / arubaos-cx | A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross- | 56d ago |
