CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- genetec inc. security centerSQL Injection affecting the Access Manager role.6.6 Medium
- yashpokharna2555 studentmanagementsystemyashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection6.9 Medium
- yashpokharna2555 studentmanagementsystemyashpokharna2555 StudentManagementSystem success.php sql injection6.9 Medium
- apache syncopeApache Syncope: JexlContextBuilder Information Disclosure4.9 Medium
- dazeb cline-mcp-memory-bankdazeb cline-mcp-memory-bank index.ts handleInitializeMemoryBank path traversal5.3 Medium
- apache syncopeApache Syncope: Post-auth RCE via Groovy static7.2 High
- debugmcp mcp-debuggerdebugmcp mcp-debugger server.ts handleGetSourceContext path traversal5.3 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection6.9 Medium
- extro responsive portfolioJoomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters7.1 High
- extro extroformsJoomla Component eXtroForms 2.1.5 SQL Injection via filter parameters7.1 High
- ourenergy collectric cmuCollectric CMU 1.0 SQL Injection via lang Parameter8.8 High
- stokedonit notebook proNotebook Pro 2.0 Denial of Service via Notebook Name Field6.9 Medium
- socusoft flash slideshow maker professionalFlash Slideshow Maker Professional 5.20 Buffer Overflow SEH8.6 High
- socusoft 3gp photo slideshowSocusoft 3GP Photo Slideshow 8.05 Buffer Overflow SEH8.6 High
- socusoft ipod photo slideshowSocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH8.6 High
- softneta meddream pacs server premiumSoftneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal8.7 High
- socusoft dvd photo slideshow professionalDVD Photo Slideshow Professional 8.07 Buffer Overflow SEH8.6 High
- meddream pacs server premiumMedDream PACS Server Premium 6.7.1.1 SQL Injection via email8.8 High
- moosocial store pluginmooSocial Store Plugin 2.6 SQL Injection via product parameter8.8 High
- admidioAdmidio 3.3.5 Cross-Site Request Forgery via roles_function.php6.9 Medium
- scanwith visual pingVisual Ping 0.8.0.0 Buffer Overflow Denial of Service6.9 Medium
- nordvpnNord VPN 6.14.31 Denial of Service via Password Field8.7 High
- nasa openvspNASA openVSP 3.16.1 Denial of Service via Buffer Overflow6.9 Medium
- global scape cuteftpCuteFTP 5.0 XP Buffer Overflow via Site Manager Label Field8.6 High
- pcviewerPCViewer vt1000 Directory Traversal via GET Request8.7 High
- fyffe php-twitter-cloneTwitter-Clone 1 SQL Injection via search.php8.8 High
- fyffe php-twitter-cloneTwitter-Clone 1 Cross-Site Request Forgery via tweetdel.php5.3 Medium
- fyffe php-twitter-cloneTwitter-Clone 1 SQL Injection via follow.php8.8 High
- soroush im desktop appSoroush IM Desktop App 0.17.0 Authentication Bypass via Database Injection7.0 High
- agatasoft auto pingmasterAgataSoft Auto PingMaster 1.5 Buffer Overflow SEH8.6 High
- splinterware system scheduler proSplinterware System Scheduler Pro 5.12 Privilege Escalation8.6 High
- mozilla firefox, firefox for ios +1 moreFirefox iOS RTL Domain Rendering Issue in Link Preview5.4 Medium
- benoitc hackneyUnbounded memory consumption in WebSocket client in hackney8.7 High
- benoitc hackneyAtom table exhaustion via unrecognized URL schemes in hackney8.7 High
- benoitc hackneyCRLF injection in WebSocket upgrade request in hackney6.9 Medium
- benoitc hackneySSRF allowlist bypass via percent-encoded host in hackney6.9 Medium
- benoitc hackneyHTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney6.0 Medium
- benoitc hackneyCR/LF injection in query parameter in hackney6.8 Medium
- benoitc hackneyUnbounded body accumulation in HTTP/3 response loop in hackney8.2 High
- benoitc hackneySOCKS5 TLS upgrade ignores caller timeout in hackney8.2 High
- benoitc hackneyCRLF injection in cookie domain/path options in hackney2.1 Low
- benoitc hackneyInfinite loop in Alt-Svc header parser in hackney8.7 High
- yunaiv yudao-cloudYunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery5.1 Medium
- edimax ew-7438rpnEdimax EW-7438RPn formLicence stack-based overflow8.7 High
- edimax ew-7438rpnEdimax EW-7438RPn formWpsProxyEnable stack-based overflow8.7 High
- krajowa izba rozliczeniowa szafir sdkImproper Certificate Verification in Szafir SDK9.3 Critical
- edimax ew-7438rpnEdimax EW-7438RPn formRadius stack-based overflow8.7 High
- edimax ew-7438rpnEdimax EW-7438RPn formAccept stack-based overflow8.7 High
- edimax ew-7438rpnEdimax EW-7438RPn formConnectionSetting stack-based overflow8.7 High
- Show moreLoading…