CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- No product listedKLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload6.9 Medium
- No product listedKLiK SocialMediaWebsite HTTP GET Request Parameter injection5.3 Medium
- code-projects employee management systemcode-projects Employee Management System empproject.php cross site scripting5.3 Medium
- code-projects employee management systemcode-projects Employee Management System changepassemp.php cross site scripting5.3 Medium
- nec platforms, ltd. aterm cm51fd, aterm mr51fn +1 moreAn OS Command Injection vulnerability exists in Aterm. If a malicious third person gains...8.5 High
- nec platforms, ltd. aterm 19000t12be, aterm gx621a1, aterm sh621a1 +6 more +8 moreA cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the...4.8 Medium
- code-projects employee management systemcode-projects Employee Management System myprofileup.php cross site scripting5.3 Medium
- code-projects employee management systemcode-projects Employee Management System myprofile.php cross site scripting5.3 Medium
- acer nitrorsense v3NitroSense V3: Local Privilege Escalation (LPE) vulnerability8.5 High
- code-projects employee management systemcode-projects Employee Management System eloginwel.php cross site scripting5.3 Medium
- sourcecodester indian invoicing systemSourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting5.1 Medium
- sourcecodester indian invoicing systemSourceCodester Indian Invoicing System category.php cross site scripting5.3 Medium
- sourcecodester indian invoicing systemSourceCodester Indian Invoicing System Backend Endpoint access control5.3 Medium
- sourcecodester indian invoicing systemSourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection5.3 Medium
- sushmi-pal invoice-systemSushmi-pal Invoice-System Profile Workflow profile improper authorization5.3 Medium
- sushmi-pal invoice-systemSushmi-pal Invoice-System User Management user improper authorization5.3 Medium
libhevcOSS-FuzzHeap-buffer-overflow in ihevcd_fmt_convNo score- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection9.3 Critical
- edimax br-6675ndEdimax BR-6675nD POST Request formWlSiteSurvey buffer overflow8.7 High
- spipaction/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.3.5 Low
- edimax br-6675ndEdimax BR-6675nD POST Request formWlanMP command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formWanTcpipSetup buffer overflow8.7 High
- edimax br-6675ndEdimax BR-6675nD POST Request formUSBStorage command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formsetPPPoE buffer overflow8.7 High
- winehq wineWine ships a .desktop file that registers itself as a MIME handler for EXE files and several...7.3 High
- besen bs20 ev charging stationBesen BS20 EV Charging Station BLE/WiFi authentication replay2.3 Low
- besen bs20 ev charging stationBesen BS20 EV Charging Station OTA Update Installation improper authorization9.2 Critical
- besen bs20 ev charging stationBesen BS20 EV Charging Station Firmware Version Check ui layer6.3 Medium
- besen bs20 ev charging stationBesen BS20 EV Charging Station BLE/UDP insufficiently protected credentials5.1 Medium
- besen bs20 ev charging stationBesen BS20 EV Charging Station Bluetooth Low Energy weak password2.3 Low
- h3c magic b0H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow8.7 High
- tenda f456Tenda F456 L7Im frmL7ImForm buffer overflow8.7 High
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection9.3 Critical
- huggingface huggingface/transformers, transformers +1 moreArbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers7.8 High
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection9.3 Critical
- itsourcecode electronic judging systemitsourcecode Electronic Judging System login.php sql injection6.9 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formPPTPSetup buffer overflow8.7 High
- edimax br-6675ndEdimax BR-6675nD POST Request formPPPoESetup buffer overflow8.7 High
- edimax br-6675ndEdimax BR-6675nD POST Request formL2TPSetup buffer overflow8.7 High
- edimax br-6675ndEdimax BR-6675nD POST Request formWpsStart command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formHwSet command injection5.3 Medium
- sourcecodester sup online shoppingSourceCodester SUP Online Shopping productedit.php cross site scripting4.8 Medium
- guizhou xiaoma technology jpressJPress UCenter Article Submission Endpoint doWriteSave improper authorization5.3 Medium
- Show moreLoading…