CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
quick-xmlcrates.ioQuadratic run time when checking a start tag for duplicate attribute names7.5 High- edimax ew-7478apcEdimax EW-7478APC POST Request formPPPoESetup stack-based overflow8.7 High
- edimax ew-7478apcEdimax EW-7478APC POST Request formL2TPSetup stack-based overflow8.7 High
- edimax ew-7478apcEdimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow8.7 High
- edimax ew-7478apcEdimax EW-7478APC POST Request formiNICbasic os command injection5.3 Medium
- edimax ew-7478apcEdimax EW-7478APC POST Request formAccept os command injection5.3 Medium
- code-projects real state servicescode-projects Real State Services single-list_sale.php add sql injection6.9 Medium
- gnu gzipGlobal Buffer Overflow in GNU gzip6.9 Medium
- gnu gzipPredictable Temporary File in GNU gzip2.0 Low
- codeastro complaint management systemCodeAstro Complaint Management System Report addreport cross site scripting5.1 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System POST Request controller.php add cross site scripting5.3 Medium
- epiphyt embed privacyWordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerability7.1 High
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting5.3 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php add sql injection6.9 Medium
- gnome yelp, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreYelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications7.1 High
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System POST Request controller.php add cross site scripting5.3 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php add unrestricted upload6.9 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php edit sql injection6.9 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System editBaptism.php sql injection6.9 Medium
- matteo manna simple user avatarWordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System delbaptism.php sql injection6.9 Medium
- eclipse foundation tinydtls, the eclipse foundation eclipse tinydtls +1 moreEclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds...6.9 Medium
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probing6.8 Medium
- oppo o+ connectO+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.7.3 High
- codeastro complaint management systemCodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization5.3 Medium
- spice-space spice-vdagent, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSpice-vdagent: path traversal in file transfer via unsanitized filename4.4 Medium
- spice-space spice-vdagent, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSpice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow5.1 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctortimings.php sql injection5.3 Medium
- hanwang e-face general management platformHanwang e-Face General Management Platform upload.do unrestricted upload6.9 Medium
- feehi cmsFeehi CMS REST API Endpoint articles missing authentication6.9 Medium
- d-link dcs-935l, dlink dcs-935l firmware +1 moreD-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection8.7 High
- feehi cmsFeehi CMS API users access control5.3 Medium
- documensoDocumenso Google OAuth Login handle-oauth-callback-url.ts improper authentication6.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctorprofile.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctorchangepassword.php sql injection5.3 Medium
- faktor vier f4 post treef4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification4.3 Medium
- unknown apcu managerAPCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution7.5 High
- hitachi virtual storage platform 5100, 5500, 5100h, 5500h, 5200, 5600, 5200h, 5600h, virtual storage platform e390, e590, e790, e990, e1090, e390h, e590h, e790h, e1090h, virtual storage platform g130, g150, g350, g370, g700, g900, f350, f370, f700, f900 +2 moreImproper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform8.3 High
- gitbucketGitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery5.3 Medium
- hitachi virtual storage platform one block 23, 24, 26, 28lack of validation for firmware update in Hitachi Virtual Storage3.7 Low
- wavlink wl-nu516u1-aWavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow8.7 High
- hitachi virtual storage platform 5100, 5200, 5500, 5600, 5100h, 5200h, 5500h, 5600h, vx8, virtual storage platform g1000, g1500, f1500, vx7 +1 moreInformation exposure vulnerability in Hitachi Storage Navigator6.8 Medium
- wavlink wl-nu516u1-aWavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection5.3 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System cross-site request forgery5.3 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreagp/amd64: Fix broken error propagation in agp_amd64_probe()5.5 Medium
- No product listedGotoHTTP reg.12x cross site scripting5.3 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection5.3 Medium
- cherryhq cherry-studioCherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization2.3 Low
- agentejo cockpit cms, cockpit cms +1 moreagentejo Cockpit CMS htaccess config.yaml YAMLLoad file access6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System departmentDoctor.php sql injection5.3 Medium
- Show moreLoading…