CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- linux, linux kernel +1 morebareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()5.5 Medium
- linux, linux kernel +1 morenet/sched: taprio: fix NULL pointer dereference in class dump5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: arp_tables: fix IEEE1394 ARP payload parsing5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreslip: bound decode() reads against the compressed packet length8.2 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreslip: reject VJ receive packets on instances with no rstate array5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreopenvswitch: cap upcall PID array size and pre-size vport replies5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: fix end-of-list detection in cgroup_storage_get_next_key()5.5 Medium
- linux, linux kernel +1 morebpf: Fix use-after-free in arena_vm_close on fork7.8 High
- tassos framework, advanced custom fields, convert forms +7 more +9 moreExtension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla9.3 Critical
- averta master sliderWordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- edge22 generateblocksWordPress GenerateBlocks plugin <= 2.1.0 - Sensitive Data Exposure vulnerability6.5 Medium
- dell storage managerA use of get request method with sensitive query strings vulnerability in volume encryption of...6.2 Medium
- synology assistantAn origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local...6.1 Medium
- synology active backup for business agentAn origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1...6.1 Medium
- synology active backup for businessA vulnerability in Active Backup for Business allows unauthorized remote attackers to read...8.6 High
- jthemes themebox - digital products ecommerceWordPress Themebox - Digital Products Ecommerce theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- synology c2 identity edge serverAn Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package...7.5 High
- synology activeprotect agentOrigin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows...6.1 Medium
- synology beestation osBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in...9.8 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation...8.1 High
- ricetheme felan frameworkWordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- synology contactsImproper neutralization of input during web page generation ('Cross-site Scripting')...5.4 Medium
- synology safe accessImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology surveillance stationIncorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station...2.7 Low
- synology surveillance stationInsufficiently protected credentials vulnerability in IPSpeaker component in Synology...4.9 Medium
- synology surveillance stationImproper preservation of permissions vulnerability in Archiving Push functionality in Synology...2.7 Low
- synology surveillance stationCleartext transmission of sensitive information vulnerability in Export Key functionality in...4.9 Medium
- synology surveillance stationMissing authorization vulnerability in AddOns functionality in Synology Surveillance Station...4.9 Medium
- synology surveillance stationImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...2.7 Low
- synology beedrive, beedrive for desktop +1 moreFiles or directories accessible to external parties vulnerability in redis-server component in...6.8 Medium
- synology beedrive, beedrive for desktop +1 moreUncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for...7.8 High
- zte zxunipos nds-lteBroken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product9.1 Critical
- helmholz rex100, rex200/250, mb connect line mbnet.mini +1 more +3 moreCommand injection via malicious configuration7.2 High
- helmholz rex100, rex200/250, mb connect line mbnet.mini +1 more +3 moreCommand injection via USB8.4 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in getAccountData function8.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in user_alarmprofile view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in tag view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in system_tag view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in system view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in devices_configuration view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in dashboard view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in alarming view7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in getWidgetTags function7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in getProjectTags function7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in VerifyCreateLicences function7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in getComponentScalings function7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in getDeviceScalings function7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreAuthenticated SQLi in getProjectScalings function7.1 High
- Show moreLoading…