CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- itsourcecode hospital management systemitsourcecode Hospital Management System department.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System Appointment appointmentdetail.php sql injection5.3 Medium
- No product listedYzmCMS index.php sql injection6.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview4.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_class.php sql injection6.9 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection5.3 Medium
- cherryhq cherry-studioCherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization6.3 Medium
gpacDebianGPAC ISOBMFF base_encoding.c data amplification4.8 Medium- investintech slimpdfreaderInvestintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview5.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System Appointment appointmentapproval.php sql injection5.3 Medium
- tenda jd12lTenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow8.7 High
libredwgOSS-FuzzHeap-double-free in dxf_entities_readNo score- tenda jd12lTenda JD12L addressNat fromAddressNat stack-based overflow8.7 High
- tenda jd12lTenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow8.7 High
- No product listedPBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\....7.8 High
- No product listedA buffer overflow in the Get_Attribute_List function of EIPStackGroup OpENer commit 76b95c allows...7.5 High
- No product listedA heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870...7.5 High
- No product listedA heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of...7.5 High
- lxml, fedora-python lxml html clean +1 morelxml: javascript: URL bypass in Cleaner via xlink:href8.2 High
- No product listedAn issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the...9.1 Critical
- gigamon gigavue-osGigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.7.5 High
dashopenSUSESecurity update for dashNo score- No product listedCross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a...6.5 Medium
- tenda jd12lTenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow8.7 High
qemuUbuntuqemu regressionNo score- tenda jd12lTenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow8.7 High
- chess play and learn appChess Play and Learn App com.chess AndroidManifest.xml backup2.4 Low
- myscale myscaledbMyScale MyScaleDB SegmentId.h getCacheKey data authenticity2.3 Low
- No product listedDatabend Tenant client_session_manager.rs state_key authorization5.3 Medium
- No product listedVoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization2.3 Low
- simstudioai simSimStudioAI sim Password Protection deployment.ts weak hash6.3 Medium
- No product listedRAGapp Knowledge File files.py FileHandler.remove_file path traversal5.3 Medium
- khoj-ai khojkhoj-ai khoj Conversation Sharing api_chat.py authorization5.1 Medium
- volcengine openvikingvolcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity2.3 Low
- joomcoder joomcck, joomcoder.com joomcck extension for joomla +1 moreJoomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.18.7 High
- code-projects project management systemcode-projects Project Management System Mail Compose mail.php cross site scripting5.1 Medium
- antlr antlr4antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal6.9 Medium
- antlr antlr4antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou2.0 Low
- antlr antlr4antlr ANTLR4 gofmt GoTarget.java GoTarget command injection4.8 Medium
- antlr antlr4antlr ANTLR4 Grammar Action Block OutputFile.java code injection6.9 Medium
- yashpokharna2555 restaurent-management-systemyashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting5.3 Medium
- yashpokharna2555 restaurent-management-systemyashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System appointment.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System ajaxmedicine.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System adminprofile.php sql injection5.1 Medium
- aidc-ai comfyui-copilotAIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection2.3 Low
ttf-parsercrates.io`ttf-parser` is unmaintainedNo score- 78 xiaozhi-esp3278 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service6.3 Medium
- Show moreLoading…