| CVE-2020-37218 | 8.2 | — | — | — | — | Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticate | 168d ago |
| CVE-2026-26289 | 8.2 | — | — | — | — | PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissio | 168d ago |
| CVE-2026-43929 | 8.2 | — | — | — | — | ssrfcheck is a library that checks if a string contains a potential SSRF attack. | 169d ago |
| CVE-2026-33833 | 8.2 | — | — | — | microsoft / azure machine learning | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machin | 169d ago |
| CVE-2026-43993 | 8.2 | — | — | — | — | JunoClaw is an agentic AI platform built on Juno Network. | 169d ago |
| CVE-2026-42260 | 8.2 | — | — | — | — | Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. | 169d ago |
| CVE-2026-35071 | 8.2 | — | — | — | dell / insightiq | Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements u | 169d ago |
| CVE-2026-41713 | 8.2 | — | — | — | vmware / spring ai | A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an | 169d ago |
| CVE-2026-39432 | 8.2 | — | — | — | — | Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control | 169d ago |
| CVE-2026-34259 | 8.2 | — | — | — | — | Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with ad | 169d ago |
| CVE-2026-43893 | 8.2 | — | — | — | — | exiftool-vendored provides cross-platform Node.js access to ExifTool. | 169d ago |
| CVE-2026-43886 | 8.2 | — | — | — | — | Outline is a service that allows for collaborative documentation. | 169d ago |
| CVE-2026-42564 | 8.2 | — | — | — | — | jotty·page is a self-hosted app for your checklists and notes. | 169d ago |
| CVE-2026-44413 | 8.2 | — | — | — | jetbrains / teamcity | In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access | 170d ago |
| CVE-2021-47941 | 8.2 | — | — | — | — | WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attacke | 171d ago |
| CVE-2021-47930 | 8.2 | — | — | — | — | Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission | 171d ago |
| CVE-2021-47928 | 8.2 | — | — | — | — | Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers | 171d ago |
| CVE-2026-27654 | 8.2 | — | — | — | f5 / nginx plus | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attack | 218d ago |
| CVE-2019-25643 | 8.2 | — | — | — | — | eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to exec | 218d ago |
| CVE-2019-25642 | 8.2 | — | — | — | — | Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb | 218d ago |
| CVE-2019-25641 | 8.2 | — | — | — | — | Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulat | 218d ago |
| CVE-2019-25640 | 8.2 | — | — | — | — | Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate d | 218d ago |
| CVE-2019-25639 | 8.2 | — | — | — | — | Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attacke | 218d ago |
| CVE-2019-25636 | 8.2 | — | — | — | zeeways / jobsite cms | Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da | 218d ago |
| CVE-2019-25635 | 8.2 | — | — | — | zeeways / matrimony cms | Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to mani | 218d ago |
| CVE-2026-32278 | 8.2 | — | — | — | opensource-workshop / connect-cms | Connect-CMS is a content management system. | 218d ago |
| CVE-2019-25581 | 8.2 | — | — | — | i-doit / i-doit | i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrar | 221d ago |
| CVE-2019-25580 | 8.2 | — | — | — | owndms / owndms | ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL | 221d ago |
| CVE-2019-25578 | 8.2 | — | — | — | codnloc / phptransformer | phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQ | 221d ago |
| CVE-2019-25576 | 8.2 | — | — | — | keplerwallpapers / kepler wallpaper script | Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execu | 221d ago |
| CVE-2019-25575 | 8.2 | — | — | — | simplepresscms / simplepress cms | SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arb | 221d ago |
| CVE-2026-33243 | 8.2 | — | — | — | denx / u-boot | barebox is a bootloader. | 221d ago |
| CVE-2026-33072 | 8.2 | — | — | — | filerise / filerise | FileRise is a self-hosted web file manager / WebDAV server. | 222d ago |
| CVE-2026-32811 | 8.2 | — | — | — | dadrus / heimdall | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. | 222d ago |
| CVE-2026-32763 | 8.2 | — | — | — | kysely / kysely | Kysely is a type-safe TypeScript SQL query builder. | 222d ago |
| CVE-2026-22733 | 8.2 | — | — | — | vmware / spring boot | Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an appli | 222d ago |
| CVE-2026-22731 | 8.2 | — | — | — | vmware / spring boot | Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an appli | 222d ago |
| CVE-2026-31965 | 8.2 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 224d ago |
| CVE-2026-26740 | 8.2 | — | — | — | giflib project / giflib | Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGif | 224d ago |
| CVE-2026-2992 | 8.2 | — | — | — | — | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation | 224d ago |
| CVE-2026-24063 | 8.2 | — | — | — | — | When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script | 224d ago |
| CVE-2026-22171 | 8.2 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow wher | 224d ago |
| CVE-2026-32296 | 8.2 | — | — | — | — | Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an una | 225d ago |
| CVE-2026-32616 | 8.2 | — | — | — | — | Pigeon is a message board/notepad/social system/blog. | 226d ago |
| CVE-2026-32600 | 8.2 | — | — | — | simplesamlphp / xml-security | xml-security is a library that implements XML signatures and encryption. | 226d ago |
| CVE-2026-32313 | 8.2 | — | — | — | xmlseclibs project / xmlseclibs | xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. | 226d ago |
| CVE-2015-20121 | 8.2 | — | — | — | nextclickventures / realtyscript | Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers | 226d ago |
| CVE-2015-20120 | 8.2 | — | — | — | nextclickventures / realtyscript | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow | 226d ago |
| CVE-2026-32231 | 8.2 | — | — | — | zeptoclaw / zeptoclaw | ZeptoClaw is a personal AI assistant. | 230d ago |
| CVE-2026-32138 | 8.2 | — | — | — | — | NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tes | 230d ago |
| CVE-2019-25543 | 8.2 | — | — | — | netartmedia / real estate portal | Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers t | 230d ago |
| CVE-2019-25542 | 8.2 | — | — | — | netartmedia / real estate portal | Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to | 230d ago |
| CVE-2019-25541 | 8.2 | — | — | — | netartmedia / php mall | Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to m | 230d ago |
| CVE-2019-25540 | 8.2 | — | — | — | netartmedia / php mall | Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to m | 230d ago |
| CVE-2019-25539 | 8.2 | — | — | — | konradpl99 / 202cms | 202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate d | 230d ago |
| CVE-2019-25538 | 8.2 | — | — | — | konradpl99 / 202cms | 202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa | 230d ago |
| CVE-2019-25537 | 8.2 | — | — | — | — | Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated a | 230d ago |
| CVE-2019-25536 | 8.2 | — | — | — | netartmedia / real estate portal | Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attacke | 230d ago |
| CVE-2019-25535 | 8.2 | — | — | — | — | Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipu | 230d ago |
| CVE-2019-25534 | 8.2 | — | — | — | — | Netartmedia PHP Car Dealer contains an SQL injection vulnerability that allows unauthenticated attackers to execut | 230d ago |
