| CVE-2026-46303 | 8.2 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation ext | 142d ago |
| CVE-2026-45327 | 8.2 | — | — | — | — | TinyIce is a streaming server for audio and video. | 145d ago |
| CVE-2026-41249 | 8.2 | — | — | — | — | CoreShop is a Pimcore enhanced eCommerce solution. | 146d ago |
| CVE-2025-69755 | 8.2 | — | — | — | — | An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive informatio | 146d ago |
| CVE-2019-25745 | 8.2 | — | — | — | — | WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unau | 146d ago |
| CVE-2019-25732 | 8.2 | — | — | — | — | PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi | 146d ago |
| CVE-2019-25730 | 8.2 | — | — | — | — | Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitr | 146d ago |
| CVE-2019-25728 | 8.2 | — | — | — | — | Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitra | 146d ago |
| CVE-2019-25726 | 8.2 | — | — | — | — | All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to e | 146d ago |
| CVE-2026-50205 | 8.2 | — | — | — | acer / connect m6e 5g firmware | System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate id | 146d ago |
| CVE-2026-41010 | 8.2 | — | — | — | — | ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jo | 146d ago |
| CVE-2026-41011 | 8.2 | — | — | — | — | PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name} | 146d ago |
| CVE-2021-4481 | 8.2 | — | — | — | — | Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecur | 147d ago |
| CVE-2021-4480 | 8.2 | — | — | — | — | Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecur | 147d ago |
| CVE-2026-28299 | 8.2 | — | — | — | solarwinds / web help desk | SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could | 148d ago |
| CVE-2021-4478 | 8.2 | — | — | — | — | Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulner | 148d ago |
| CVE-2026-10622 | 8.2 | — | — | — | — | Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileg | 148d ago |
| CVE-2026-24752 | 8.2 | — | — | — | accellion / kiteworks | Kiteworks is a private data network (PDN). | 148d ago |
| CVE-2026-24088 | 8.2 | — | — | — | qualcomm / ar9380 firmware | Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customi | 148d ago |
| CVE-2026-49491 | 8.2 | — | — | — | — | Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive d | 148d ago |
| CVE-2018-25434 | 8.2 | — | — | — | — | WP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 148d ago |
| CVE-2018-25433 | 8.2 | — | — | — | — | Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attacker | 148d ago |
| CVE-2018-25428 | 8.2 | — | — | — | — | Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary | 148d ago |
| CVE-2026-37234 | 8.2 | — | — | — | mosaic5g / flexric | FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. | 149d ago |
| CVE-2026-24751 | 8.2 | — | — | — | accellion / kiteworks | Kiteworks is a private data network (PDN). | 149d ago |
| CVE-2026-45545 | 8.2 | — | — | — | nextcloud / tables | Nextcloud is an open source content collaboration platform. | 149d ago |
| CVE-2026-45302 | 8.2 | — | — | — | — | parse-nested-form-data is a tiny node module for parsing FormData by name into objects and arrays. | 149d ago |
| CVE-2026-43624 | 8.2 | — | — | — | — | F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows | 149d ago |
| CVE-2018-25425 | 8.2 | — | — | — | — | Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S | 151d ago |
| CVE-2018-25424 | 8.2 | — | — | — | — | Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to b | 151d ago |
| CVE-2018-25422 | 8.2 | — | — | — | — | MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute | 151d ago |
| CVE-2018-25420 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25419 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25418 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25417 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25416 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25415 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25414 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25413 | 8.2 | — | — | — | — | AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit | 151d ago |
| CVE-2018-25411 | 8.2 | — | — | — | — | MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to | 151d ago |
| CVE-2018-25407 | 8.2 | — | — | — | — | eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execu | 151d ago |
| CVE-2018-25406 | 8.2 | — | — | — | — | eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execu | 151d ago |
| CVE-2018-25405 | 8.2 | — | — | — | — | eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execu | 151d ago |
| CVE-2026-45627 | 8.2 | — | — | — | — | Arcane is an interface for managing Docker containers, images, networks, and volumes. | 152d ago |
| CVE-2018-25404 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25403 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25402 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25401 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25400 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25399 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25398 | 8.2 | — | — | — | — | The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 152d ago |
| CVE-2018-25395 | 8.2 | — | — | — | — | Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitr | 152d ago |
| CVE-2018-25394 | 8.2 | — | — | — | — | Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitr | 152d ago |
| CVE-2018-25390 | 8.2 | — | — | — | — | HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database | 152d ago |
| CVE-2018-25389 | 8.2 | — | — | — | — | HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database | 152d ago |
| CVE-2018-25386 | 8.2 | — | — | — | — | HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate | 152d ago |
| CVE-2018-25385 | 8.2 | — | — | — | — | E-Registrasi Pencak Silat 18.10 contains an SQL injection vulnerability that allows unauthenticated attackers to e | 152d ago |
| CVE-2018-25382 | 8.2 | — | — | — | — | Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database infor | 152d ago |
| CVE-2026-46510 | 8.2 | — | — | — | — | form-data-objectizer converts FormData to object. | 152d ago |
| CVE-2026-45615 | 8.2 | — | — | — | — | mouse07410/asn1c is an ASN.1 compiler. | 152d ago |
