CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
HTTPJuliaCookie jar accepts `Secure/__Host-/__Secure-` cookies from non-secure origins in HTTP.jlNo scoreHTTPJuliaPredictable WebSocket masking key and handshake nonce in HTTP.jl clientNo scoreHTTPJuliaCR/LF injection in server-sent events (SSE) fields in HTTP.jlNo scoreHTTPJuliaRedirect credential leakage across scheme/port in HTTP.jlNo scoreHTTPJuliaOpen redirect in the HTTP.jl static file server canonical redirectsNo scoreHTTPJuliaInsufficient HTTP/2 pseudo-header and Host/:authority validation in HTTP.jl serverNo scoreHTTPJuliaHTTP/1 client request smuggling via CR/LF in method, target, or host in HTTP.jlNo scoreHTTPJuliaUnbounded HTTP/2 concurrent streams and Rapid Reset denial of service in HTTP.jl serverNo scoreHTTPJuliaThread-safety and out-of-bounds reads in the HTTP.jl content-type snifferNo score- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content6.4 Medium
- elixir-plug plugPlug: quadratic-time decoding of nested query/body parameters enables denial of service8.7 High
- akin software computer import export industry and trade ltd. e-commerceReflected XSS in Akinsoft's e-Commerce6.1 Medium
- cap-go capgoCapgo - Information Disclosure via Unauthenticated /updates defaultChannel Parameter8.7 High
- cap-go capgoCapgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy8.7 High
- cap-go capgoCapgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Plane8.6 High
- cap-go capgoCapgo - Password Spraying via Public-Key Accessible Credential Validation Endpoint6.9 Medium
- cap-go capgoCapgo - Authorization Bypass in API Key Management via App-Limited Keys8.7 High
- cap-go capgoCapgo - Cross-Organization App Takeover via Mismatched org_id and app_id in /private/role_bindings8.6 High
- akin software computer import export industry and trade ltd. cafeplusRCE in Akınsoft's CafePlus8.8 High
- totolink ex1200lBuffer Overflow in Totolink EX1200L router9.4 Critical
- eclipse open vsxOpen VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and...4.1 Medium
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine m365 manager plus +1 more +3 moreAccount Takeover via Predictable SSO Ticket Generation9.0 Critical
- mb connect line mbconnect24, mymbconnect24 +1 moreAuthenticated unintended access to critical program parameters8.6 High
- hayajo mojolicious::plugin::web::auth::oauth2Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter9.1 Critical
- unknown frontend file manager pluginFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download7.5 High
- unknown frontend file manager pluginFrontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename5.4 Medium
- unknown simple basic contact formSimple Basic Contact Form <= 20250114 - Reflected XSS7.1 High
- infility global, unknown infility global +1 moreInfility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter8.8 High
- infility global, unknown infility global +1 moreInfility Global < 2.15.20 - Editor+ SQL Injection via orderby Parameter6.8 Medium
- silentmatt expr-evalexpr-eval vulnerable to Code Execution9.2 Critical
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +8 more +10 moreOpenssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination3.7 Low
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +21 more +23 moreOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions5.0 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +23 more +25 moreOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service4.3 Medium
- yokogawa electric corporation ci server, fast/tools +1 moreOverview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return...8.2 High
wtOSS-FuzzHeap-use-after-free in Wt::Http::Request::parseFormUrlEncodedNo scorelibrawOSS-FuzzUse-of-uninitialized-value in LibRaw::fbddNo score- gogsGogs: Ability to import local repositories via Mirror Settings8.1 High
- gogsGogs: CSRF Leading to Organization Owner Takeover8.8 High
- No product listedSQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute...6.5 Medium
- No product listedAn issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the...8.1 High
virtuoso-opensourceDebianAn issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High- red hat enterprise linux 7An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers...7.5 High
virtuoso-opensourceDebianAn issue in the t_set_push component of openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 Highvirtuoso-opensourceDebianAn issue in the sslr_qst_get component of openlink virtuoso-opensource v7.2.11 allows attackers...7.5 Highvirtuoso-opensourceDebianAn issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows...7.5 High- red hat enterprise linux 7An issue in the st_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to...7.5 High
virtuoso-opensourceDebianAn issue in the sqlo_tb_col_preds component of openlink virtuoso-opensource v7.2.11 allows...7.5 Highvirtuoso-opensourceDebian,virtuoso-opensource-debuginfoRed Hat,virtuoso-opensource-utilsRed Hat +2 moreAn issue in the sqlo_natural_join_cond component of openlink virtuoso-opensource v7.2.11 allows...7.5 High- red hat enterprise linux 7An issue in the sqlo_strip_in_join component of openlink virtuoso-opensource v7.2.11 allows...7.5 High
virtuoso-opensourceDebianAn issue in the sqlo_key_part_best component of openlink virtuoso-opensource v7.2.11 allows...7.5 High- Show moreLoading…