CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- yangzongzhuan ruoyi-vueyangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload5.3 Medium
- No product listedJeecgBoot OpenAPI Endpoint call improper authentication6.3 Medium
- itzcrazykns vaneItzCrazyKns Vane Model Provider API route.ts server-side request forgery6.9 Medium
- itzcrazykns vaneItzCrazyKns Vane API route.ts missing authentication6.3 Medium
- ulisesbocchio jasypt-spring-bootulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt6.3 Medium
- nousresearch hermes-agentNousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison4.8 Medium
- nousresearch hermes-agentNousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent prompt_builder.py _scan_context_content injection6.9 Medium
ettercapDebianEttercap GG Dissector ec_gg.c FUNC_DECODER heap-based overflow6.3 Medium- projectworlds online art gallery shopprojectworlds Online Art Gallery Shop adminHome.php sql injection6.9 Medium
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formEZCHNwlanSetu formEZCHNwlanSetup command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn Setting formConnectionSetting command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formAccep formAccept command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formwlencrypt24g buffer overflow8.7 High
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formHwSet command injection5.3 Medium
postcss-selector-parsernpm,cargoRed Hat,clippyRed Hat +18 more +20 morepostcss-selector-parser AST Serialization container.js toString recursion5.3 Medium- vbulletinvBulletin Login cross site scripting5.1 Medium
- sourcecodester hospitals patient records management systemSourceCodester Hospitals Patient Records Management System manage_history.php sql injection6.9 Medium
- sourcecodester hospitals patient records management systemSourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent Slack Agent/Mattermost Agent escape output6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection6.9 Medium
- prefecthq prefecthq/prefectArgument Injection in prefecthq/prefect8.5 High
- nousresearch hermes-agentNousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization6.9 Medium
- calcom cal.diycalcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure6.9 Medium
- gnu saslIn GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and...7.5 High
- edimax ew-7438rpnEdimax EW-7438RPn webs mp stack-based overflow8.7 High
- edimax ew-7438rpnEdimax EW-7438RPn webs formWizSurvey os command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn webs formWirelessTbl buffer overflow8.7 High
flywayOSS-FuzzSecurity exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternalNo scorelibhevcOSS-FuzzHeap-buffer-overflow in ihevcd_fmt_convNo score- edimax ew-7438rpnEdimax EW-7438RPn webs formWizSurvey buffer overflow8.7 High
openbabelOSS-FuzzContainer-overflow in OpenBabel::MDLFormat::ReadV3000BlockNo score- edimax ew-7438rpnEdimax EW-7438RPn webs formWpsStart stack-based overflow8.7 High
- golang.org/x/image golang.org/x/image/bmpPanic when reading out of bound palette index in golang.org/x/image/bmp5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn webs formWpsStart os command injection5.3 Medium
- sourcecodester hospitals patient records management systemSourceCodester Hospitals Patient Records Management System view_history.php sql injection5.3 Medium
- dolibarr erp crm, erp\/crm +1 moreDolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php9.3 Critical
- d-link dir-601D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi8.7 High
- sippSIPp 3.6 Local Buffer Overflow via Command-line Arguments8.6 High
- audiograbberAudiograbber 1.83 Local Buffer Overflow via SEH8.6 High
- jomresJoomla Component jomres 9.11.2 Cross-Site Request Forgery5.3 Medium
- redaxo cms mediapoolRedaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload8.7 High
- ultimate-form-builder-lite ultimate form builder liteWordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id7.1 High
- harmistechnology ekrishtaJoomla! Component EkRishta 2.10 SQL Injection via username8.8 High
- userspiceuserSpice 4.3.24 Username Enumeration via existingUsernameCheck.php9.3 Critical
- userspiceuserSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header5.1 Medium
- harmistechnology ek rishtaJoomla! Component Ek Rishta 2.10 SQL Injection via user_detail8.8 High
- Show moreLoading…