CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Incorrect Authorization due to improper enforcement of role-based access control8.5 High
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insertion of Sensitive Information into Log File via error log archives8.7 High
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file8.6 High
- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file.8.6 High
tigervncTuxCare,tigervnc-iconsTuxCare,tigervnc-licenseTuxCare +4 more +6 moretigervnc: Fix of 6 CVEsNo score- icagenda.com icagenda extension for joomlaJoomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.128.6 High
- phoca.cz phoca cart extension for joomlaJoomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.78.6 High
- phoca.cz phoca download extension for joomlaJoomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.45.3 Medium
- phoca.cz phoca cart extension for joomlaJoomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.75.3 Medium
- vsdeskvsDesk Task Scheduler OS Command Injection8.6 High
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...7.1 High
- vsdeskWeak File Name Generation in vsDesk5.3 Medium
- thinkingreed inc. f-revocrmF-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while...5.1 Medium
- unknown json optionsJSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update9.8 Critical
- themeum kirkiKirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload6.8 Medium
- ataur r gutenkitGutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure2.7 Low
- ataur r gutenkitGutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload6.8 Medium
- bowo admin and site enhancements (ase)Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC6.8 Medium
- averta depicter — popup & slider builderDepicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import7.2 High
- unknown royal addons for elementorRoyal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder6.6 Medium
- siteground ai agent by sitegroundAI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint5.3 Medium
- liedekef events made easyEvents Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property7.5 High
- seiko epson corporation multiple seiko epson printers and scannersMultiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle...6.3 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a...4.9 Medium
- libexpat project libexpatIn libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to...5.9 Medium
- No product listedDeDeCMS select_media_post.php unrestricted upload5.3 Medium
- code-projects login registration systemcode-projects Login Registration System SQL Database Backup login_registration_system.sql file access6.9 Medium
- aeternalabshq pullmdAeternaLabsHQ PullMD REST API Endpoint api server-side request forgery6.9 Medium
- No product listedPunk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter5.7 Medium
- amirsanni mini-inventory-and-sales-management-systemamirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection5.3 Medium
- No product listedDeDeCMS advancedsearch.php sql injection6.9 Medium
- code-projects employee management systemcode-projects Employee Management System Admin Login Endpoint aprocess.php sql injection6.9 Medium
- No product listedAn issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain...7.5 High
- No product listedThe Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information...7.5 High
mrubyUbuntu,nghttp2Azure Linux +1 moremruby bigint.c udiv floating point comparison with incorrect operator6.9 Medium- code-projects assessment managementcode-projects Assessment Management welcome.php sql injection6.9 Medium
- tp-link systems inc archer mr600 v2, tp-link systems inc. tl-mr100 v3.2, tl-mr6400 v8.0 +5 more +7 moreUnauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR6007.1 High
- wiresharkOut-of-bounds Read in Wireshark4.7 Medium
- wiresharkNULL Pointer Dereference in Wireshark7.5 High
- chenhg5 cc-connectchenhg5 cc-connect Management API engine.go shellExecCommand os command injection6.9 Medium
- wiresharkNULL Pointer Dereference in Wireshark4.7 Medium
- wiresharkReachable Assertion in Wireshark3.1 Low
- wiresharkExpired Pointer Dereference in Wireshark3.1 Low
- wiresharkExpired Pointer Dereference in Wireshark3.1 Low
- wiresharkBuffer Over-read in Wireshark3.1 Low
- wiresharkOut-of-bounds Read in Wireshark5.5 Medium
- wiresharkOut-of-bounds Read in Wireshark5.5 Medium
- wiresharkNULL Pointer Dereference in Wireshark5.5 Medium
- wiresharkUse After Free in Wireshark5.5 Medium
- wiresharkOut-of-bounds Write in Wireshark4.7 Medium
- Show moreLoading…