| CVE-2026-46509 | 8.2 | — | — | — | — | deepobj provides get, set, delete deep objects in javascript. | 153d ago |
| CVE-2026-44358 | 8.2 | — | — | — | — | Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. | 153d ago |
| CVE-2026-35676 | 8.2 | — | — | — | — | phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API end | 153d ago |
| CVE-2026-35675 | 8.2 | — | — | — | — | phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows u | 153d ago |
| CVE-2026-45137 | 8.2 | — | — | — | anchor-lang / anchor | Anchor is a framework providing several convenient developer tools for writing Solana programs. | 154d ago |
| CVE-2026-44712 | 8.2 | — | — | — | — | pam_usb provides hardware authentication for Linux using ordinary removable media. | 154d ago |
| CVE-2026-4868 | 8.2 | — | — | — | gitlab / gitlab | GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, | 154d ago |
| CVE-2026-45089 | 8.2 | — | — | — | — | Dalfox is a powerful open-source XSS scanner and utility focused on automation. | 154d ago |
| CVE-2026-44483 | 8.2 | — | — | — | — | RVF (formerly Remix Validated Form) provides easy form validation and state management for React. | 154d ago |
| CVE-2026-44328 | 8.2 | — | — | — | free5gc / free5gc | free5GC is an open-source implementation of the 5G core network. | 154d ago |
| CVE-2026-42083 | 8.2 | — | — | — | free5gc / free5gc | free5GC is an open-source implementation of the 5G core network. | 154d ago |
| CVE-2026-44971 | 8.2 | — | — | — | — | GuardDog is a CLI tool to identify malicious PyPI packages. | 154d ago |
| CVE-2026-46037 | 8.2 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: validate reply type before using i | 154d ago |
| CVE-2025-71311 | 8.2 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMS | 154d ago |
| CVE-2026-45843 | 8.2 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: slip: bound decode() reads against the compres | 154d ago |
| CVE-2026-42735 | 8.2 | — | — | — | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-m | 154d ago |
| CVE-2026-9312 | 8.2 | — | — | — | github / enterprise server | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unaut | 154d ago |
| CVE-2026-5260 | 8.2 | — | — | — | — | A flaw was found in libgnutls. | 154d ago |
| CVE-2026-42013 | 8.2 | — | — | — | — | A flaw was found in gnutls. | 154d ago |
| CVE-2026-44843 | 8.2 | — | — | — | langchain / langchain | LangChain is a framework for building agents and LLM-powered applications. | 155d ago |
| CVE-2026-8890 | 8.2 | — | — | — | — | code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to | 155d ago |
| CVE-2026-44728 | 8.2 | — | — | — | babel / babel | Babel is a compiler for writing next generation JavaScript. | 155d ago |
| CVE-2026-48126 | 8.2 | — | — | — | — | Algernon is a small self-contained pure-Go web server. | 155d ago |
| CVE-2018-25379 | 8.2 | — | — | — | — | Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows un | 156d ago |
| CVE-2018-25372 | 8.2 | — | — | — | — | MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers | 156d ago |
| CVE-2018-25371 | 8.2 | — | — | — | — | mooSocial Store Plugin 2.6 contains a blind SQL injection vulnerability that allows unauthenticated attackers to m | 156d ago |
| CVE-2018-25364 | 8.2 | — | — | — | — | Twitter-Clone 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary | 156d ago |
| CVE-2018-25362 | 8.2 | — | — | — | — | Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database | 156d ago |
| CVE-2018-25351 | 8.2 | — | — | — | — | Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated at | 158d ago |
| CVE-2018-25348 | 8.2 | — | — | — | — | Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to | 158d ago |
| CVE-2018-25342 | 8.2 | — | — | — | — | Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manip | 158d ago |
| CVE-2018-25341 | 8.2 | — | — | — | — | Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL | 158d ago |
| CVE-2018-25340 | 8.2 | — | — | — | — | Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL | 158d ago |
| CVE-2026-9284 | 8.2 | — | — | — | — | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and informati | 158d ago |
| CVE-2026-5843 | 8.2 | — | — | — | docker / docker desktop | The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports an | 159d ago |
| CVE-2026-5817 | 8.2 | — | — | — | docker / docker desktop | The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when l | 159d ago |
| CVE-2026-48235 | 8.2 | — | — | — | — | Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, lon | 160d ago |
| CVE-2026-24188 | 8.2 | — | — | — | nvidia / tensorrt | NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. | 161d ago |
| CVE-2026-9057 | 8.2 | — | — | — | — | A broken access control issue has been identified in the Talend Administration Center, that allows a user with “Vie | 161d ago |
| CVE-2026-22810 | 8.2 | — | — | — | joplinapp / joplin | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. | 163d ago |
| CVE-2026-46720 | 8.2 | — | — | — | — | Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. | 164d ago |
| CVE-2018-25339 | 8.2 | — | — | — | — | Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extr | 164d ago |
| CVE-2018-25338 | 8.2 | — | — | — | — | Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers t | 164d ago |
| CVE-2018-25333 | 8.2 | — | — | — | — | Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticate | 164d ago |
| CVE-2018-25330 | 8.2 | — | — | — | — | Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that al | 164d ago |
| CVE-2026-46728 | 8.2 | — | — | — | denx / u-boot | Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitt | 164d ago |
| CVE-2021-47956 | 8.2 | — | — | — | — | EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipul | 165d ago |
| CVE-2021-47954 | 8.2 | — | — | — | — | LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database | 165d ago |
| CVE-2020-37244 | 8.2 | — | — | — | — | Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execut | 165d ago |
| CVE-2020-37243 | 8.2 | — | — | — | — | Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unau | 165d ago |
| CVE-2020-37242 | 8.2 | — | — | — | — | Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to ex | 165d ago |
| CVE-2026-8657 | 8.2 | — | — | — | — | Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patc | 165d ago |
| CVE-2021-47966 | 8.2 | — | — | — | — | PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid p | 166d ago |
| CVE-2026-34253 | 8.2 | — | — | — | — | A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in | 166d ago |
| CVE-2026-42591 | 8.2 | — | — | — | thecodingmachine / gotenberg | Gotenberg is a Docker-powered stateless API for PDF files. | 167d ago |
| CVE-2026-42590 | 8.2 | — | — | — | thecodingmachine / gotenberg | Gotenberg is a Docker-powered stateless API for PDF files. | 167d ago |
| CVE-2026-40893 | 8.2 | — | — | — | thecodingmachine / gotenberg | Gotenberg is a Docker-powered stateless API for PDF files. | 167d ago |
| CVE-2026-5395 | 8.2 | — | — | — | — | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is | 167d ago |
| CVE-2026-5396 | 8.2 | — | — | — | — | The Fluent Forms plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all vers | 167d ago |
| CVE-2026-32992 | 8.2 | — | — | — | cpanel / cpanel | SSL verification is disabled in the DNS Cluster system. | 167d ago |
