| CVE-2026-43913 | 8.1 | — | — | — | dani-garcia / vaultwarden | Vaultwarden is a Bitwarden-compatible server written in Rust. | 170d ago |
| CVE-2026-28907 | 8.1 | — | — | — | apple / ipados | The issue was addressed with improved input validation. | 170d ago |
| CVE-2026-43640 | 8.1 | — | — | — | bitwarden / server | Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating | 170d ago |
| CVE-2026-42315 | 8.1 | — | — | — | pyload-ng project / pyload-ng | pyLoad is a free and open-source download manager written in Python. | 170d ago |
| CVE-2026-38568 | 8.1 | — | — | — | — | HireFlow v1.2 is vulnerable to Incorrect Access Control. | 170d ago |
| CVE-2026-38566 | 8.1 | — | — | — | — | HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. | 170d ago |
| CVE-2026-30635 | 8.1 | — | — | — | — | Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary command | 170d ago |
| CVE-2026-42349 | 8.1 | — | — | — | clerk / clerk\/astro | Clerk JavaScript is the official JavaScript repository for Clerk authentication. | 170d ago |
| CVE-2026-7819 | 8.1 | — | — | — | pgadmin / pgadmin 4 | Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. | 170d ago |
| CVE-2026-42609 | 8.1 | — | — | — | getgrav / grav | Grav is a file-based Web platform. | 170d ago |
| CVE-2026-32853 | 8.1 | — | — | — | libvncserver project / libvncserver | LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability i | 218d ago |
| CVE-2026-33678 | 8.1 | — | — | — | vikunja / vikunja | Vikunja is an open-source self-hosted task management platform. | 218d ago |
| CVE-2026-33668 | 8.1 | — | — | — | vikunja / vikunja | Vikunja is an open-source self-hosted task management platform. | 218d ago |
| CVE-2026-33316 | 8.1 | — | — | — | vikunja / vikunja | Vikunja is an open-source self-hosted task management platform. | 218d ago |
| CVE-2026-4718 | 8.1 | — | — | — | mozilla / firefox | Undefined behavior in the WebRTC: Signaling component. | 218d ago |
| CVE-2026-4021 | 8.1 | — | — | — | — | The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeove | 219d ago |
| CVE-2026-32300 | 8.1 | — | — | — | opensource-workshop / connect-cms | Connect-CMS is a content management system. | 219d ago |
| CVE-2026-33651 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 219d ago |
| CVE-2026-33649 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 219d ago |
| CVE-2025-15517 | 8.1 | — | — | — | tp-link / archer nx600 firmware | A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi e | 219d ago |
| CVE-2026-33482 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 219d ago |
| CVE-2026-33293 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 220d ago |
| CVE-2026-3629exploited | 8.1 | 0.43% | 1/3 | +206d | — | The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all version | 221d ago |
| CVE-2025-14037 | 8.1 | — | — | — | — | The Invelity Product Feeds plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all | 222d ago |
| CVE-2026-33236 | 8.1 | — | — | — | nltk / nltk | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting rese | 222d ago |
| CVE-2026-33142 | 8.1 | — | — | — | hackerbay / oneuptime | OneUptime is a solution for monitoring and managing online services. | 222d ago |
| CVE-2026-33010 | 8.1 | — | — | — | doobidoo / mcp-memory-service | mcp-memory-service is an open-source memory backend for multi-agent systems. | 222d ago |
| CVE-2026-31836 | 8.1 | — | — | — | bluewavelabs / checkmate | Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response time | 222d ago |
| CVE-2026-4434 | 8.1 | — | — | — | devolutions / devolutions server | Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man | 222d ago |
| CVE-2026-22324 | 8.1 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 222d ago |
| CVE-2026-27625 | 8.1 | — | — | — | stirling / stirling pdf | Stirling-PDF is a locally hosted web application that performs various operations on PDF files. | 222d ago |
| CVE-2026-4478 | 8.1 | — | — | — | — | A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. | 222d ago |
| CVE-2026-33055 | 8.1 | — | — | — | alexcrichton / tar-rs | tar-rs is a tar archive reading/writing library for Rust. | 222d ago |
| CVE-2026-33043 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 223d ago |
| CVE-2026-33038 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 223d ago |
| CVE-2026-33037 | 8.1 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 223d ago |
| CVE-2026-32942 | 8.1 | — | — | — | pjsip / pjsip | PJSIP is a free and open source multimedia communication library written in C. | 223d ago |
| CVE-2026-32939 | 8.1 | — | — | — | dataease / dataease | DataEase is an open source data visualization analysis tool. | 223d ago |
| CVE-2026-32808 | 8.1 | — | — | — | pyload / pyload | pyLoad is a free and open-source download manager written in Python. | 223d ago |
| CVE-2026-32759 | 8.1 | — | — | — | filebrowser / filebrowser | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within | 223d ago |
| CVE-2026-29189 | 8.1 | — | — | — | suitecrm / suitecrm | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. | 223d ago |
| CVE-2026-29096 | 8.1 | — | — | — | suitecrm / suitecrm | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. | 223d ago |
| CVE-2026-32034 | 8.1 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowIn | 223d ago |
| CVE-2026-33302 | 8.1 | — | — | — | open-emr / openemr | OpenEMR is a free and open source electronic health records and medical practice management application. | 223d ago |
| CVE-2026-33301 | 8.1 | — | — | — | open-emr / openemr | OpenEMR is a free and open source electronic health records and medical practice management application. | 223d ago |
| CVE-2026-2646 | 8.1 | — | — | — | wolfssl / wolfssl | A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function. | 223d ago |
| CVE-2026-25471 | 8.1 | — | — | — | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safe | 223d ago |
| CVE-2026-27093 | 8.1 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 223d ago |
| CVE-2026-27096 | 8.1 | — | — | — | — | Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme al | 224d ago |
| CVE-2026-32730 | 8.1 | — | — | — | apostrophecms / apostrophecms | ApostropheCMS is an open-source content management framework. | 224d ago |
| CVE-2026-4396 | 8.1 | — | — | — | devolutions / hub reporting service | Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attack | 224d ago |
| CVE-2026-31971 | 8.1 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 224d ago |
| CVE-2026-31970 | 8.1 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 224d ago |
| CVE-2026-31969 | 8.1 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 224d ago |
| CVE-2026-31968 | 8.1 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 224d ago |
| CVE-2026-31963 | 8.1 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 224d ago |
| CVE-2026-32634 | 8.1 | — | — | — | nicolargo / glances | Glances is an open-source system cross-platform monitoring tool. | 224d ago |
| CVE-2026-32610 | 8.1 | — | — | — | nicolargo / glances | Glances is an open-source system cross-platform monitoring tool. | 224d ago |
| CVE-2025-55046 | 8.1 | — | — | — | murasoftware / mura cms | MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted con | 224d ago |
| CVE-2026-31898 | 8.1 | — | — | — | parall / jspdf | jsPDF is a library to generate PDFs in JavaScript. | 225d ago |
