CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- jenkins bitbucket oauth, jenkins project bitbucket oauth plugin +1 moreJenkins Bitbucket OAuth Plugin does not restrict the redirect URL after login4.3 Medium
- jenkins appspider, jenkins project appspider plugin +1 moreJenkins AppSpider Plugin does not perform a permission check in a method implementing form validation4.3 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreJenkins Credentials Binding Plugin does not properly sanitize file names for file and zip file credentials7.5 High
- jenkins project pipeline: groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries7.5 High
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem8.8 High
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin deserializes data from LDAP referrals without validation6.6 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin follows LDAP referrals by default6.6 Medium
- jenkins ldap, jenkins project ldap plugin +1 moreJenkins LDAP Plugin deserializes data from LDAP referrals without validation6.6 Medium
- jenkins ldap, jenkins project ldap plugin +1 moreJenkins LDAP Plugin follows LDAP referrals6.6 Medium
- ibm aspera hsts for cp4i, aspera high-speed transfer server for cloud pak for integration +1 moreAuthentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration9.1 Critical
- ibm operations analytics - log analysis, operations analytics log analysis +1 moreIBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation8.4 High
- dalibo anonymizer, postgresql anonymizer +1 morePostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function6.8 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar SIEM is vulnerable to using components with known vulnerabilities7.2 High
- ibm operations analytics - log analysis, operations analytics log analysis +1 moreIBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout Mechanism5.9 Medium
- ibm sdi, security directory integrator +1 moreSecurity vulnerability was found in IBM Security Directory Integrator5.3 Medium
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.6.5 Medium
- libusblibusb < 1.0.30 NULL Pointer Dereference in parse_interface()6.9 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability6.5 Medium
- libusblibusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()5.1 Medium
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.7.5 High
- seedprod llc proWordPress SeedProd Pro plugin < 6.19.5 - Local File Inclusion vulnerability7.5 High
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.8.8 High
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.9.8 Critical
- ibm langflow oss, langflow +1 moreUnauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS7.1 High
- ibm langflow oss, langflow +1 morePath Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution9.8 Critical
- ibm openbmcOpen BMC Denial of Service5.3 Medium
- ibm db2IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query6.5 Medium
- ibm iIBM i is Affected by a Denial of Service Vulnerability []6.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables5.5 Medium
- ibm db2IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables6.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap5.5 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a security bypass vulnerability4.4 Medium
- linux, linux kernel +1 morecan: ucan: fix devres lifetime5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: strparser: fix skb_head leak in strp_abort_strp()7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: reject zero shift in nft_bitwise5.5 Medium
- linux, linux kernel +1 morefs: afs: revert mmap_prepare() change7.8 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morenet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels8.1 High
- linux, linux kernel +1 morenet: caif: clear client service pointer on teardown5.5 Medium
- linux, linux kernel +1 moreInput: edt-ft5x06 - fix use-after-free in debugfs teardown7.8 High
- linux, linux kernel +1 moretpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()5.5 Medium
- linux, linux kernel +1 moremd/md-llbitmap: raise barrier before state machine transition5.5 Medium
- linux, linux kernel +1 moreext4: fix bounds check in check_xattrs() to prevent out-of-bounds access7.1 High
- linux, linux kernel +1 moremm/vmalloc: take vmap_purge_lock in shrinker7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: rtw88: check for PCI upstream bridge existence5.5 Medium
- linux, linux kernel +1 moremedia: rc: igorplugusb: heed coherency rules5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreALSA: aloop: Fix peer runtime UAF during format-change stop7.8 High
- linux, linux kernel +1 morezram: do not forget to endio for partial discard requests5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()5.5 Medium
- linux, linux kernel +1 moremm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: bridge: use a stable FDB dst snapshot in RCU readers5.5 Medium
- Show moreLoading…