CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- trendnet tew-432brpTRENDnet TEW-432BRP formSetPassword stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formResetStatistic stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formSetEnableWizard stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formSysLog stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formPortFw stack-based overflow8.7 High
- No product listedOpen5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication6.9 Medium
kimageformatsOSS-FuzzUse-of-uninitialized-value in ReadContainerNo score- No product listedOpen5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption5.3 Medium
- bdtask multi-store inventory management systemBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection5.1 Medium
- dolibarr erp crmDolibarr ERP CRM messaging.php authorization5.3 Medium
- westboy cicadascmswestboy CicadasCMS AbstractCacheManager.java search cross site scripting5.3 Medium
- talelin lin-cms-spring-bootTaleLin lin-cms-spring-boot book Endpoint BookController.java access control5.3 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formStaDrvSetup command injection5.3 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formQoS buffer overflow8.7 High
- edimax br-6478acEdimax BR-6478AC POST Request formPPPoESetup stack-based overflow8.7 High
- shibby tomatoShibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflow8.7 High
- nezumi text::linefoldText::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters6.2 Medium
- trendnet tew-432brpTRENDnet TEW-432BRP formSetDomainFilter stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formSetProtocolFilter stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formSetUrlFilter stack-based overflow8.7 High
- winmtrWinMTR 0.91 Denial of Service via Buffer Overflow8.7 High
- yot cmsYot CMS 3.3.1 SQL Injection via aid and cid Parameters8.8 High
- livebms gate pass management systemGate Pass Management System 2.1 SQL Injection via login-exec.php8.8 High
- armcode arm whoisArm Whois 3.11 Denial of Service via Buffer Overflow6.9 Medium
- spider312 mogg web simulator scriptMOGG web simulator Script All Version SQL Injection via play.php8.8 High
- openstamanager open sta managerOpen STA Manager 2.3 Arbitrary File Download via Path Traversal7.1 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via watch.php8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via genre.php8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via year.php8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via quality.php8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via country.php8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via director Parameter8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via actor.php8.8 High
- aiopmsd finalAiOPMSD Final 1.0.0 SQL Injection via search.php8.8 High
- deltasql delta sql, deltasql project deltasql +1 moreDelta Sql 1.8.2 Arbitrary File Upload via docs_upload.php9.3 Critical
- m-gb mgb opensource guestbookMGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php8.8 High
- simpkh sim-pkhSIM-PKH 2.4.1 SQL Injection via media.php id Parameter7.1 High
- simpkh sim-pkhSIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php8.7 High
- open ises project, openises open ises project +1 moreThe Open ISES Project 3.30A Path Traversal Arbitrary File Download8.7 High
- endonesia portaleNdonesia Portal 8.7 SQL Injection via mod.php8.8 High
- endonesia portaleNdonesia Portal 8.7 SQL Injection via mod.php8.8 High
- endonesia portaleNdonesia Portal 8.7 SQL Injection via mod.php8.8 High
- trendnet tew-432brpTRENDnet TEW-432BRP formSetFirewallRule stack-based overflow8.7 High
- trendnet tew-432brpTRENDnet TEW-432BRP formSetMACFilter stack-based overflow8.7 High
- No product listedOpen5GS nghttp2-server.c ogs_pool_id_calloc denial of service5.3 Medium
- linux, linux kernel +1 moreeventpoll: fix ep_remove struct eventpoll / struct file UAF7.8 High
- No product listedOpen5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service5.3 Medium
- No product listedOpen5GS Shared NF-profile nnrf-handler.c denial of service5.3 Medium
- No product listedOpen5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write5.3 Medium
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes8.8 High
- Show moreLoading…