CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- apache camel, apache software foundation camel pqc, red hat build of apache camel for spring boot 4 +2 moreApache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager7.8 High
- apache camel, apache software foundation camel mina, red hat build of apache camel for spring boot 4 +1 more +3 moreApache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDP8.8 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd Natlimit fromNatlimitof buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd QuickIndex formQuickIndex buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow8.7 High
- tenda hg3, hg3 firmware +1 moreTenda HG3 formgponConf os command injection8.7 High
- oppo wallet appSensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet5.6 Medium
- code-projects employee management systemcode-projects Employee Management System edit.php cross site scripting5.3 Medium
- shadowclonelabs glutamatemcpservers, glutamate mcp servers +1 moreShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgery6.9 Medium
- notepad++Vulnerability in Notepad++6.6 Medium
- code-projects invoice system in laravelcode-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization5.3 Medium
- uriparseruriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts...5.1 Medium
- code-projects invoice system in laravelcode-projects Invoice System in Laravel Profile profile improper authorization5.3 Medium
- code-projects invoice system in laravelcode-projects Invoice System in Laravel User Management user improper authorization5.3 Medium
- code-projects chat systemcode-projects Chat System send_message.php cross site scripting4.8 Medium
- code-projects home service systemcode-projects Home Service System Appointment Booking booking.php cross site scripting5.3 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- hbai-ltd toonflow-appHBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal5.3 Medium
- hbai-ltd toonflow-appHBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal2.3 Low
- hbai-ltd toonflow-appHBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery5.3 Medium
- likeadmin-likeshop likeadmin phplikeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection5.1 Medium
- tenda f456, f456 firmware +1 moreTenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow8.7 High
- moxa edr-8010 series, edr-g9010 series +1 moreAn improper handling of the length parameter inconsistency vulnerability has been identified in...8.7 High
- moxa edr-8010 series, edr-g9010 series +1 moreAn improper ownership management vulnerability has been identified in Moxa’s Secure Router....6.0 Medium
- tenda f456, f456 firmware +1 moreTenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow8.7 High
- red hat advanced cluster management for kubernetes 2, winfsp +1 moreRace Condition Vulnerability7.0 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow8.7 High
- jgrodgers highland software custom role managerHighland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd SetIpBind fromSetIpBind buffer overflow8.7 High
- itsourcecode courier management systemitsourcecode Courier Management System edit_parcel.php sql injection6.9 Medium
- itsourcecode courier management systemitsourcecode Courier Management System edit_branch.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System locations.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System execute1.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System execute.php sql injection6.9 Medium
- codepanda source canteen management systemCodePanda Source canteen_management_system login.php sql injection6.9 Medium
- codeastro online job portalCodeAstro Online Job Portal user-cvs file information disclosure6.9 Medium
- code-projects inventory management systemcode-projects Inventory Management System Login sql injection6.9 Medium
readstatOSS-FuzzIndex-out-of-bounds in sas7bdat_submit_columns_if_neededNo score- japan computer emergency response team coordination center (jpcert/cc) logontracerThere is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows...5.1 Medium
kimageformatsOSS-FuzzUse-of-uninitialized-value in PKFormatConverter_InitializeConvertNo score- japan computer emergency response team coordination center (jpcert/cc) logontracerAn OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may...8.7 High
kimageformatsOSS-FuzzUse-of-uninitialized-value in JXRHandlerPrivate::readTextMetaNo score- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow8.6 High
- canonical authdauthd Denial of Service and Local Privilege Escalation7.3 High
- No product listedA reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in...6.1 Medium
- No product listedA reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in...6.1 Medium
- No product listedCross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before...8.8 High
- Show moreLoading…