CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System view_order.php sql injection6.9 Medium
- jknack handlebars.javaHandlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass7.5 High
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload5.1 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.3 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.1 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.0 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.0 High
- emqxEMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution6.6 Medium
- cvat-ai cvatCVAT: Stored XSS via annotation guides in audio tasks8.5 High
- greydgl pentestgptGreyDGL PentestGPT Web-Page Crawling injection2.3 Low
- cole aiosmtplibaiosmtplib: STARTTLS response injection5.9 Medium
bugwardenopenSUSESecurity update for bugwardenNo score- itsourcecode hospital management systemitsourcecode Hospital Management System viewappointmentapproved.php sql injection5.3 Medium
- estonian information system authority (ria) digidoc4Arbitrary file overwrite vulnerability in DigiDoc4 client8.4 High
- atutorReflected XSS in ATutor4.8 Medium
- atutorReflected XSS in ATutor4.8 Medium
- atutorStored XSS in ATutor5.1 Medium
- atutorInsecure Direct Object Reference in ATutor5.3 Medium
- atutorServer-Side Request Forgery in ATutor5.1 Medium
- atutorPath Traversal in ATutor6.9 Medium
- atutorPath Traversal leading to Remote Code Execution in ATutor8.7 High
- atutorMissing Authorization Check in ATutor5.3 Medium
- baserproject basercmsbaserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php8.6 High
- atutorGeneration of Predictable Email Confirmation Token in ATutor6.3 Medium
- atutorPath Traversal in ATutor2.3 Low
- atutorCross-Site Request Forgery (CSRF) in ATutor5.1 Medium
- atutorAuthentication Bypass in ATutor6.3 Medium
- atutorRemote Code Execution via Unrestricted File Upload in ATutor8.7 High
- labredescefetrj wegiaWeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php7.1 High
- labredescefetrj wegiaWeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha8.6 High
- cgauge @cgauge/yaml@cgauge/yaml npm Package Arbitrary Code Execution via eval() YAML Tag8.4 High
- baylan measuring instruments industry and trade inc. smart meter management application (bms)Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS9.8 Critical
- code-projects simple inventory systemcode-projects Simple Inventory System delete.php sql injection6.9 Medium
- liftoff-sr cipsterliftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds6.9 Medium
- liftoff-sr cipsterliftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds6.9 Medium
- debian graphicsmagickOut-of-bounds write in GraphicsMagick PCD decoder8.4 High
- hashthemes easy elementor addonsWordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability9.6 Critical
- klarso gmbh neo-mjsCVE-2026-184829.8 Critical
- mycred new user approveWordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability5.3 Medium
glib2TuxCare,glib2-develTuxCare,glib2-docTuxCare +3 more +5 moreglib2: Fix of 4 CVEsNo score- infinitewp client, revmakx infinitewp client +1 moreWordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability7.6 High
glib2TuxCare,glib2-develTuxCare,glib2-docTuxCare +3 more +5 moreglib2: Fix of 4 CVEsNo scoreglib2TuxCare,glib2-develTuxCare,glib2-docTuxCare +3 more +5 moreglib2: Fix of 4 CVEsNo score- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.4.8 Medium
- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.6.6 Medium
- liftoff-sr cipsterliftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption6.9 Medium
- Show moreLoading…