CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- No product listed OFCMS JSON Query SysUserController.java query sql injection 5.3 Medium
- No product listed OFCMS JSON Query SystemParamController.java query sql injection 5.3 Medium
- No product listed OFCMS JSON Query SystemDictController.java query sql injection 5.3 Medium
- open asset import library assimp Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero 4.8 Medium
- open asset import library assimp Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow 4.8 Medium
- open asset import library assimp Assimp glTF2Asset.h LazyDict null pointer dereference 4.8 Medium
- open asset import library assimp Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference 4.8 Medium
- open asset import library assimp Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference 4.8 Medium
- otrs Possible information disclosure via External Interface 5.7 Medium
- yves sereal::decoder Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input 8.1 High
- offis dcmtk OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow 5.3 Medium
- No product listed OFCMS ComnController ComnController.java query sql injection 5.3 Medium
- tenda w12 Tenda W12 httpd set_local_time_0 stack-based overflow 8.7 High
- tenda w12 Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow 8.7 High
- tenda w12 Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service 7.1 High
- tenda w12 Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow 8.7 High
-
netatalkDebian [Unknown description] No score -
netatalkDebian [Unknown description] No score -
netatalkDebian [Unknown description] No score -
netatalkDebian [Unknown description] No score - tenda w12 Tenda W12 httpd cgistaKickOff stack-based overflow 8.7 High
- totolink n300rh Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow 9.3 Critical
- code-projects online hospital management system code-projects Online Hospital Management System patient.php sql injection 6.9 Medium
- sourcecodester hospitals patient records management system SourceCodester Hospitals Patient Records Management System Users.php save sql injection 6.9 Medium
- sourcecodester hospitals patient records management system SourceCodester Hospitals Patient Records Management System Users.php delete sql injection 6.9 Medium
- trendnet tew-432brp TRENDnet TEW-432BRP formWlanSetup stack-based overflow 8.7 High
- trendnet tew-432brp TRENDnet TEW-432BRP formWlanSetup command injection 5.3 Medium
- trendnet tew-432brp TRENDnet TEW-432BRP formSysCmd stack-based overflow 8.7 High
- opencats OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column 8.6 High
- opencats OpenCATS - SQL Injection in DataGrid sortDirection Parameter 8.4 High
- trendnet tew-432brp TRENDnet TEW-432BRP formSysCmd command injection 5.3 Medium
- trendnet tew-432brp TRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflow 8.7 High
- code-projects online music site code-projects Online Music Site AdminEditAlbum.php sql injection 6.9 Medium
- No product listed Security update for putty No score
- aider-ai aider Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery 5.3 Medium
- aider-ai aider Aider-AI Aider Code Generation Workflow sql injection 5.3 Medium
- aider-ai aider Aider-AI Aider Architect Mode auth.py editor_coder.run code injection 5.3 Medium
- aider-ai aider Aider-AI Aider Pre-commit Hook args.py protection mechanism 5.3 Medium
- orthanc explorer 2 Orthanc Explorer 2 URL StudyList.vue cross site scripting 5.3 Medium
- bdtask multi-store inventory management system Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload 5.3 Medium
- code-projects online music site code-projects Online Music Site AdminUpdateAlbum.php sql injection 5.1 Medium
- code-projects visitor management system code-projects Visitor Management System phone_0.php sql injection 5.3 Medium
- ousl-group-brinarybrains school student management system OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery 6.3 Medium
- ousl-group-brinarybrains school student management system OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection 5.3 Medium
- ousl-group-brinarybrains school student management system OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication 6.9 Medium
- edimax br-6478ac Edimax BR-6478AC POST Request formWlbasic command injection 5.3 Medium
- edimax br-6478ac Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflow 8.7 High
- edimax br-6478ac Edimax BR-6478AC POST Request formUSBFolder buffer overflow 8.7 High
- wpengine advanced custom fields (acf®) Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters 5.3 Medium
- edimax br-6478ac Edimax BR-6478AC POST Request formUSBAccount buffer overflow 8.7 High
- Show olderLoading…