CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- mercurycom mipc252w firmwareMERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication...9.8 Critical
- mercurycom mipc252w firmwareThe RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed...6.2 Medium
- mercurycom mipc252w firmwareA handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows...4.4 Medium
- mercurycom mipc252w firmwareA null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5...7.5 High
- tenda ac18 firmwareA command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is...9.8 Critical
- No product listedA path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows...4.3 Medium
- No product listedA remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl...9.8 Critical
- No product listedA path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a...7.5 High
- No product listedAn issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows...7.5 High
- No product listedAn open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows...4.3 Medium
- No product listedA reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version 2.31.1. User...6.1 Medium
- andybalholm brotli, 7-zip p7zip, anthropic bun +100 more +102 moreOut-of-Bounds Write in Google Brotli Decoder9.2 Critical
- No product listedThe Fan Control application V251 contains an improper privilege handling vulnerability in its...8.8 High
- No product listedAn issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories.7.5 High
- No product listedNASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter9.4 Critical
- No product listedSQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the...6.5 Medium
- geovision inc. gv-ip device utilityGeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability9.3 Critical
- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow8.7 High
- d-link dir-822, dlink dir-822 firmware +1 moreD-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection6.9 Medium
- choieastsea simple-openstack-mcpchoieastsea simple-openstack-mcp server.py exec_openstack os command injection6.9 Medium
- bidingcc buildingaiBidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgery6.9 Medium
- agentdeskai browser-tools-mcpAgentDeskAI browser-tools-mcp browser-connector.ts os command injection6.9 Medium
- code-projects employee management systemcode-projects Employee Management System Endpoint eprocess.php sql injection6.9 Medium
- intina47 context-syncIntina47 context-sync Git Integration git-integration.ts os command injection6.9 Medium
- toowiredd chatgpt-mcp-serverToowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection6.9 Medium
- liyupi yu-pictureliyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection6.9 Medium
- 666ghj mirofish666ghj MiroFish Query Parameter simulation.py get_simulation_posts path traversal6.9 Medium
- 666ghj mirofish666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection6.9 Medium
- tenda f456, f456 firmware +1 moreTenda F456 httpd setcfm buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd VirtualSer fromVirtualSer buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd L7Prot frmL7ProtForm buffer overflow8.7 High
- baomidou dynamic-datasourcebaomidou dynamic-datasource StandardEvaluationContext/SpelExpressionParser DsSpelExpressionProcessor.java DsSpelExpressionProcessor#doDetermineDatasource injection5.3 Medium
- No product listedGreenCMS index.php themeadd unrestricted upload5.3 Medium
- wansviewWansview 1.0.2 Denial of Service via Buffer Overflow6.9 Medium
- p10 central management softwareP10 Central Management Software 1.4.13 Denial of Service6.8 Medium
- p10 observerip scan toolObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field6.9 Medium
- cewe-photoworld cewe photoshowCEWE Photoshow 6.3.4 Buffer Overflow Denial of Service8.7 High
- mersenne prime95Prime95 29.4b7 Denial of Service via Proxy Password Field6.9 Medium
- bome restoratorBome Restorator 1793 Denial of Service via Buffer Overflow6.9 Medium
- pj64-emu project64Project64 2.3.2 Denial of Service via Plugin Directory6.9 Medium
- ezbsystems easybootEasyboot 6.6.0 Buffer Overflow Denial of Service6.9 Medium
- ezbsystems softdiskSoftdisk 3.0.3 Buffer Overflow Denial of Service6.9 Medium
- editorsoftware stylewriterStyleWriter 1.0 Denial of Service via Pattern Input6.9 Medium
- hdtune drive power managerDrive Power Manager 1.10 Denial of Service via Name Field6.8 Medium
- hdtune easy photoresqEasy PhotoResQ 1.0 Buffer Overflow Denial of Service6.9 Medium
- fathomFathom 2.4 Denial of Service via Authorization Code Buffer Overflow6.8 Medium
- hdtune hd tune proHD Tune Pro 5.70 Denial of Service via Options Dialog6.9 Medium
- securimport ismartviewproiSmartViewPro 1.5 Buffer Overflow via SavePath Parameter8.6 High
- Show moreLoading…