| CVE-2026-35348 | uutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing — coreutils | 5.5 | Medium | 2026-04-22 |
| CVE-2026-34944 | Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 — wasmtime | 7.5AI | HighAI | 2026-04-09 |
| CVE-2026-34943 | Wasmtime panics when lifting `flags` component value — wasmtime | 7.5AI | HighAI | 2026-04-09 |
| CVE-2026-24175 | NVIDIA Triton Inference Server 安全漏洞 — Triton Inference Server | 7.5 | High | 2026-04-07 |
| CVE-2026-34986 | Go JOSE affect by a panic in JWE decryption — go-jose | 7.5 | High | 2026-04-06 |
| CVE-2026-34752 | Haraka affected by DoS via `__proto__` email header — Haraka | 5.3AI | MediumAI | 2026-04-02 |
| CVE-2026-33203 | SiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass — siyuan | 7.5 | High | 2026-03-20 |
| CVE-2026-32770 | Parse Server: LiveQuery subscription with invalid regular expression crashes server — parse-server | 5.9 | Medium | 2026-03-18 |
| CVE-2026-32314 | Yamux remote Panic via malformed Data frame with SYN set and len = 262145 — rust-yamux | 7.5AI | HighAI | 2026-03-13 |
| CVE-2026-31949 | LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos — LibreChat | 6.5 | Medium | 2026-03-13 |
| CVE-2026-2229 | undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation — undici | 7.5 | High | 2026-03-12 |
| CVE-2026-1528 | undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client — undici | 7.5 | High | 2026-03-12 |
| CVE-2026-31870 | cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header — cpp-httplib | 7.5 | High | 2026-03-11 |
| CVE-2026-31812 | Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing — quinn | 7.5 | - | 2026-03-10 |
| CVE-2026-20068 | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability — Cisco Cyber Vision | 5.8 | Medium | 2026-03-04 |
| CVE-2026-20031 | ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability — Cisco Secure Endpoint | 5.3 | Medium | 2026-03-04 |
| CVE-2026-27631 | Exiv2: Uncaught exception - cannot create std::vector larger than max_size() — exiv2 | 5.5AI | MediumAI | 2026-03-02 |
| CVE-2026-1507 | Uncaught Exception vulnerability in AVEVA PI Data Archive — PI Data Archive PI Server | 7.5 | High | 2026-02-10 |
| CVE-2026-25577 | Emmett has an Unhandled CookieError Exception Causing Denial of Service — core | 7.5 | High | 2026-02-10 |
| CVE-2025-13064 | AXIS Camera Station Pro 安全漏洞 — AXIS Camera Station Pro | 4.5 | Medium | 2026-02-10 |
| CVE-2025-67647 | SvelteKit Denial of service and possible SSRF when using prerendering — kit | 7.5AI | HighAI | 2026-01-15 |
| CVE-2025-66578 | robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation — xmlseclibs | 6.0 | Medium | 2025-12-09 |
| CVE-2025-20758 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 | 7.5AI | HighAI | 2025-12-02 |
| CVE-2025-20754 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 | 7.5AI | HighAI | 2025-12-02 |
| CVE-2025-20753 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8675, MT8771, MT8791, MT8791T, MT8797 | 7.5AI | HighAI | 2025-12-02 |
| CVE-2025-66305 | Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter — grav | 4.9AI | MediumAI | 2025-12-01 |
| CVE-2025-8870 | On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device. — EOS | 4.9 | Medium | 2025-11-14 |
| CVE-2025-12423 | Denial of Service - Protocol Manipulation — BLU-IC2 | 7.5AI | HighAI | 2025-10-28 |
| CVE-2025-59462 | Denial-of-service (DoS) via delayed or missing client response — TLOC100-100 all Firmware versions | 6.5 | Medium | 2025-10-27 |
| CVE-2025-48430 | Gallagher Command Centre Server 安全漏洞 — Command Centre Server | 5.5 | Medium | 2025-10-23 |