CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- openfga, openfga helm charts +1 moreOpenFGA has Improper Policy Enforcement5.0 Medium
- bigbluebuttonBigBlueButton's missing authorization allows viewer to inject/overwrite captions6.5 Medium
- bigbluebuttonBigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"4.3 Medium
- github enterprise serverImproper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server7.2 High
- github enterprise serverAuthorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers5.3 Medium
- github enterprise serverImproper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API5.3 Medium
- github enterprise serverIncorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypass7.5 High
- github enterprise serverServer-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack8.9 High
- get-hermes hermes web ui, nesquena hermes-webui +1 moreNesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id7.2 High
- zero motorcycles firmwareZero Motorcycles Firmware Key Exchange without Entity Authentication5.9 Medium
- nesquena hermes-webuiNesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch4.8 Medium
- nesquena hermes-webuinesquena hermes-webui Arbitrary Workspace Directory Access5.3 Medium
- comfast cf-n1-sComfast CF-N1-S Endpoint mbox-config command injection5.3 Medium
- docmostDocmost: XSS in Comments with JavaScript URI5.4 Medium
- sanluan publiccmsSanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption5.3 Medium
- astroAstro: XSS via incomplete `</script>` sanitization in `define:vars` allows case-insensitive and whitespace-based bypass6.1 Medium
- esri portal for arcgisIncorrect privilege assignment in Portal for ArcGIS9.8 Critical
- esri portal for arcgisIncorrect privilege assignment in Portal for ArcGIS9.8 Critical
- hkuds openharnessHKUDS OpenHarness Insecure Default Remote Channel Allowlist8.3 High
- oracle fusion middleware, oracle corporation security service +1 moreVulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C...6.4 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.5 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2.3 Low
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...3.2 Low
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...5.0 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...6.0 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.5 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.5 High
- oracle hyperion infrastructure technologyVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion ...5.2 Medium
- oracle application development framework, oracle corporation application development framework (adf) +1 moreVulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion...7.8 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.5 High
- oracle peoplesoft enterprise cs student recordsVulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft ...5.7 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). ...4.9 Medium
- oracle fusion middlewareVulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported...5.4 Medium
- oracle financial services transaction filteringVulnerability in the Oracle Financial Services Transaction Filtering product of Oracle Financial...7.5 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.5 High
- oracle corporation database server, oracle java virtual machine +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...7.5 High
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...6.8 Medium
- oracle life sciences informVulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications ...6.5 Medium
- oracle life sciences informVulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications ...6.3 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...4.8 Medium
- oracle financial services customer screeningVulnerability in the Oracle Financial Services Customer Screening product of Oracle Financial...7.5 High
- oracle mysql, oracle corporation mysql shell +1 moreVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). ...5.0 Medium
- oracle mysql, oracle corporation mysql shell +1 moreVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). ...5.8 Medium
- oracle mysql, oracle corporation mysql shell +1 moreVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). ...5.0 Medium
- Show moreLoading…