CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- gstreamerGStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- originlab origin viewerOriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- originlab origin viewerOriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- originlab originproOriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- originlab originproOriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- op-engineering link-preview-jslink-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-438977.5 High
- originlab originproOriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- originlab originproOriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- originlab originproOriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- aeonAeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability7.8 High
- aeonAeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability7.8 High
- aeonAeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 High
- red hat openshift container platform 4, openshift container platform 5 +1 moreKata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy8.1 High
- sony xav-9500esSony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability7.8 High
- sony xav-9500esSony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability2.4 Low
- sony xav-9500esSony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- sony xav-9500esSony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- sony xav-9500esSony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability3.9 Low
- sony xav-9500esSony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability8.8 High
- sony xav-9500esSony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability3.5 Low
- nixos nixNix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature2.8 Low
- monkeytypegame monkeytypeMonkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)7.5 High
- heimdall data database proxyHeimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability7.2 High
- codeastro apartment visitor management systemCodeAstro Apartment Visitor Management System forgotpw.php sql injection6.9 Medium
- kenwood dnr1007xrKenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability6.6 Medium
- kenwood dnr1007xrKenwood DNR1007XR startUpdateProcess Command Injection Vulnerability6.8 Medium
- kenwood dnr1007xrKenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability6.8 Medium
- kenwood dnr1007xrKenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 High
- kenwood dnr1007xrKenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability6.8 Medium
- kenwood dnr1007xrKenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability7.0 High
- masci banksBanks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root6.0 Medium
- kenwood dnr1007xrKenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability6.8 Medium
- osnexus quantastorOSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability9.8 Critical
- nomachineNoMachine getstat Command Injection Remote Code Execution Vulnerability8.8 High
- m2team nanazipNanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value7.1 High
- comfast cf-n1-sComfast CF-N1-S mbox-config sprintf command injection5.3 Medium
- red hat build of apache camel 3.33.3.sp2, build of apache camel 4 for quarkus 3, build of debezium 3 +12 more +14 moreWildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding7.4 High
- apache inlongApache InLong: Authenticated SSRF via POST /api/node/testConnection5.4 Medium
- jhy soupjsoup Uncontrolled Resource Consumption in XmlTreeBuilder8.7 High
- apache inlongApache InLong: Agent path traversal via unvalidated file source path7.5 High
- apache inlongApache InLong: Missing authorization on DataNode management endpoints8.1 High
- apache inlongApache InLong: Missing authorization in StreamSource forceDelete8.1 High
- sourcecodester cet automated grading system with ai predictive analyticsSourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization5.3 Medium
- apache inlongApache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService9.8 Critical
- apache inlongApache InLong: SQL Injection via String Concatenation Vulnerability Report9.8 Critical
- apache inlongApache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint9.8 Critical
- apache inlongApache InLong: Ordinary users can create new packages5.3 Medium
- apache inlongApache InLong: Non-template responsible persons can view template information4.3 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_category sql injection5.3 Medium
- Show moreLoading…