CWE-705

CVEs per yearBy the year they were published

1. 20253
2. 20269

Newest CVEs

• CVE-2026-73860

  CRIU: Parasite hijack triggered by snapshot of malicious software

  checkpoint-restore · criu

  Medium5.4
• CVE-2026-120341

  mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect

  mathurvishal · CloudClassroom-PHP-Project

  Medium6.9
• CVE-2026-55537

  PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

  MervinPraison · PraisonAI

  High7.1
• CVE-2026-45819

  baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate…

  web-platform-dx · baseline-browser-mapping

  Medium6.6
• CVE-2026-40208

  Denial of service via DoH3 queries

  PowerDNS · DNSdist

  Low3.7
• CVE-2026-10271

  a4m4 Student-Management-System Admin Endpoint admin redirect

  a4m4 · Student-Management-System

  Medium5.3
• CVE-2026-3449

  Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.…

  @tootallnate/once

  Medium4.8
• CVE-2026-3264

  go2ismail Free-CRM Administrative redirect

  go2ismail · Free-CRM

  Medium5.3
• CVE-2026-3262

  go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirect

  go2ismail · Asp.Net-Core-Inventory-Order-Management-System

  Medium5.3
• CVE-2025-53856

  TMM vulnerability

  F5 · BIG-IP

  High8.7

Vendors it comes up for most

1. go2ismail2
2. F51
3. MervinPraison1
4. PowerDNS1
5. ScriptAndTools1
6. a4m41
7. checkpoint-restore1
8. mathurvishal1
9. web-platform-dx1