| | CVE-2026-24308 |  Apache | high | 7.5 | 1.1%
| | Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all pla… | Mar 7, 2026 | Jul 3, 2026 |
| | CVE-2026-24281 | Apache | high | 7.4 | 0.6%
| | Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN… | Mar 7, 2026 | Jul 3, 2026 |
| | CVE-2026-30827 |  Red Hat | medium | 7.5 | 0.0%
| | express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 … | Mar 7, 2026 | Mar 7, 2026 |
| | CVE-2026-30242 |  Check Point | high | 8.5 | 0.0%
| | Plane is an an open-source project management tool. Prior to version 1.2.3, the webhook URL validati… | Mar 6, 2026 | Mar 10, 2026 |
| | CVE-2026-27139 | Red Hat | low | 2.5 | 0.0%
| | On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the r… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-27138 | Red Hat | low | 3.7 | 0.0%
| | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-27142 | Red Hat | medium | 5.4 | 0.1%
| | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-25679 | Red Hat | medium | 5.3 | 0.1%
| | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-27137 | Red Hat | medium | 5.3 | 0.0%
| | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-30231 | Red Hat | medium | 6.5 | 0.1%
| | Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-30230 | Red Hat | medium | 5.3 | 0.1%
| | Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-3419 | Red Hat | medium | 5.3 | 0.0%
| | Fastify incorrectly accepts malformed `Content-Type` headers containing trailing characters after th… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-29089 | Red Hat | high | 8.8 | 0.0%
| | TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgre… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-26017 | Red Hat | high | 7.7 | 0.1%
| | CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in Cor… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-26018 | Red Hat | high | 7.5 | 0.1%
| | CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerabil… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-23925 | Red Hat | medium | 7.6 | 0.0%
| | An authenticated Zabbix user (User role) with template/host write permissions is able to create obje… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-29062 | Red Hat | high | 7.5 | 0.1%
| | jackson-core contains core low-level incremental ("streaming") parser and generator abstractions use… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-28804 | Red Hat | medium | 6.5 | 0.0%
| | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who use… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-28802 | Red Hat | high | 9.1 | 0.0%
| | Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to bef… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-28799 | Red Hat | high | 7.5 | 0.1%
| | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-29068 | Red Hat | high | 9.8 | 0.1%
| | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-3632 | Red Hat | low | 3.9 | — | | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-3633 | Red Hat | low | 3.9 | — | | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-3634 | Red Hat | medium | 3.9 | — | | No description is available for this CVE. | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69645 | Red Hat | low | 2.8 | 0.0%
| | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with ma… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69644 | Red Hat | low | 2.8 | 0.0%
| | An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerabil… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69646 | Red Hat | low | 2.8 | 0.0%
| | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with ma… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69650 | Red Hat | low | 3.3 | 0.1%
| | GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF bi… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69652 | Red Hat | low | 3.3 | 0.0%
| | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when proces… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69649 | Red Hat | low | 3.3 | 0.0%
| | GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a c… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2025-69651 | Red Hat | low | 2.8 | 0.0%
| | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when p… | Mar 6, 2026 | Mar 6, 2026 |
| | CVE-2026-26125 |  Microsoft | high | 8.6 | 0.1%
| | Payment Orchestrator Service Elevation of Privilege Vulnerability | Mar 5, 2026 | Mar 16, 2026 |
| | CVE-2026-26124 | Microsoft | medium | 6.7 | 0.1%
| | '.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. | Mar 5, 2026 | Mar 16, 2026 |
| | CVE-2026-26122 | Microsoft | medium | 6.5 | 0.4%
| | Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized … | Mar 5, 2026 | Mar 16, 2026 |
| | CVE-2026-23651 | Microsoft | medium | 6.7 | 0.1%
| | Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate priv… | Mar 5, 2026 | Mar 16, 2026 |
| | CVE-2026-21536 | Microsoft | critical | 9.8 | 0.4%
| | Microsoft Devices Pricing Program Remote Code Execution Vulnerability | Mar 5, 2026 | Mar 16, 2026 |
| | CVE-2026-3606 | Red Hat | medium | 4.4 | 0.0%
| | A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the fun… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-29054 | Red Hat | high | 7.5 | 0.0%
| | Traefik is an HTTP reverse proxy and load balancer. From version 2.11.9 to 2.11.37 and from version … | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-26999 | Red Hat | high | 7.5 | 0.0%
| | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a … | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-26998 | Red Hat | medium | 4.4 | 0.0%
| | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a … | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-25048 | Red Hat | high | 7.5 | 0.1%
| | xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prio… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-2092 | Red Hat | high | 7.7 | — | ✓ Fix | No description is available for this CVE. | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-3047 | Red Hat | high | 8.8 | 0.4%
| ✓ Fix | A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SA… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-2603 | Red Hat | high | 8.1 | — | ✓ Fix | No description is available for this CVE. | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-3009 | Red Hat | high | 8.1 | 0.1%
| ✓ Fix | A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-1605 | Red Hat | high | 7.5 | 0.1%
| | In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerabili… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2025-11143 | Red Hat | low | 3.7 | 0.1%
| | The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unu… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2026-27982 | Red Hat | medium | 4.3 | 0.0%
| | An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP init… | Mar 5, 2026 | Mar 5, 2026 |
| | CVE-2025-40931 | Apache | medium | — | 0.1%
| | Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.
Apache::S… | Mar 5, 2026 | Apr 21, 2026 |
| | CVE-2026-3381 | Red Hat | medium | 5.3 | 0.1%
| | Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.
Compr… | Mar 5, 2026 | Mar 5, 2026 |