CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could...5.6 Medium
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak...6.5 Medium
- nvidia gpu display driver, guest driver +1 moreNVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause...7.1 High
- ibm web server plug-ins for websphere application server and websphere liberty, websphere application server +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins7.5 High
- nvidia geforce, gpu display driver, rtx, quadro, nvs +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an...7.8 High
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use...8.8 High
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities7.3 High
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities8.0 High
- chatwootChatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts6.8 Medium
- autodesk 3ds maxWRL File Parsing Memory Corruption in Autodesk 3ds Max7.8 High
- autodesk 3ds maxWRL File Parsing Memory Exhaustion in Autodesk 3ds Max5.5 Medium
- chatwootChatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values8.5 High
- eppendorf bioflo 320Eppendorf BioFlo 320 Use of hard-coded password9.3 Critical
- autodesk 3ds maxWRL File Parsing Memory Corruption in Autodesk 3ds Max7.8 High
- autodesk 3ds maxTIF File Parsing Out-of-Bounds Write in Autodesk 3ds Max7.8 High
- autodesk 3ds maxPAR File Parsing NULL Pointer Dereference in Autodesk 3ds Max5.5 Medium
- citeum openctiOpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAdd7.2 High
- twentyTwenty: SQL Injection via the timeZone field9.9 Critical
- teableio teableteableio teable Sign-up LoginPage.tsx cross site scripting5.3 Medium
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities8.1 High
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities7.5 High
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities7.7 High
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities6.2 Medium
- twentyTwenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers)8.7 High
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities7.5 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260506] - Authenticated blind SQLi in com_finder6.9 Medium
- joomla joomla\!, joomla! project framework filter package +1 moreJoomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.6.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260511] - MFA Authentication Bypass8.2 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260505] - CSRF in user activation endpoint4.6 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260509] - LFI in HTMLView layout parameter7.5 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260507] - Authenticated blind SQLi in com_tags6.9 Medium
- haojing8312 workclawhaojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection5.3 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260510] - Path traversal in com_media webservice endpoint5.9 Medium
- joomla joomla\!, joomla! project framework filter package +1 moreJoomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.6.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260512] - MFA Authentication Bypass8.2 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260502] - XSS in com_associations6.9 Medium
- xyproto algernonAlgernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir8.2 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260515] - Incorrect Access Control in sample data plugins5.3 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260516] - Incorrect Access Control in com_scheduler6.4 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260518] - Transport encryption downgrade for password and username reset links9.8 Critical
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260508] - Improper access check in com_config webservice endpoints8.6 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260501] - XSS in feed modules6.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints8.2 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260504] - XSS in readmore links6.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260513] - Privilege escalation through com_users batch task8.2 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260503] - XSS in com_contenthistory6.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects7.5 High
- xyproto algernonAlgernon: Race Condition in handle() shared LState8.2 High
- google cloud apigee-xServer-Side Request Forgery and Credential Exfiltration in Google Cloud Apigee via SetIntegrationRequest Policy.9.2 Critical
- oretnom23 hospitals patient records management systemSourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting4.8 Medium
- Show moreLoading…