CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- dev@tamara.co tamara checkoutTamara Checkout <= 1.9.9.20 - Unauthenticated Order Status Manipulation5.3 Medium
- glenwpcoder drag and drop multiple file upload for contact form 7Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting3.5 Low
- unknown newpath wildapricotpress add-onNewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API5.3 Medium
- nanbu welcart e-commerceWelcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter5.4 Medium
- imagination technologies graphics ddkGPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`5.5 Medium
- imagination technologies graphics ddkGPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory7.8 High
- wpforms proWPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values7.2 High
- imagination technologies graphics ddkGPU DDK - rgxfw_to_ptr() does not reject FW private data pointers7.8 High
- rocket.chatRocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10...4.3 Medium
- rocket.chatRocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10...7.5 High
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreClusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no local ownership check7.7 High
- yamaha corporation vocaloid6Missing authentication for critical function vulnerability exists in VOCALOID6. Any process...4.8 Medium
- yamaha corporation vocaloid6Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to...6.9 Medium
- datiphy inc. data management centerDatiphy Data Management Center - External Control of File Name or Path9.3 Critical
- datiphy inc. data management centerDatiphy Data Management Center - Missing Authentication for Critical Function8.8 High
- sourcecodester dynamic input field generator using html, css, and phpSourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection5.3 Medium
- datiphy inc. data management centerDatiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command9.4 Critical
- datiphy inc. data management centerDatiphy Data Management Center - Use of Default Credentials9.3 Critical
- sourcecodester dynamic input field generator using html, css, and phpSourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery5.3 Medium
- droundy arrayrefThe arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a...9.8 Critical
- droundy append-only-vecThe append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a...9.8 Critical
- droundy internmentThe internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a...9.8 Critical
- apple watchosThis issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4....2.4 Low
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS...4.3 Medium
- genians genian nac v4.0, genian nac v5.0, genian ztna v6.0 +2 moreImproper input validation and Exposure of sensitive information through data queries...8.7 High
- openstack glanceIn OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass...2.2 Low
- canonical apportPath Traversal Vulnerability in apport-unpack6.7 Medium
- spipSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as...9.8 Critical
- ptc flexplm, windchill pdmlink +1 moreServer Side Request Forgery (SSRF) vulnerability reported in Windchill7.7 High
- ptc flexplm, windchill pdmlink +1 moreCritical Remote Code Execution (RCE) vulnerability reported in Windchill9.2 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.7 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.9 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- nationalsecurityagency ghidraGhidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb6.7 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.4 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- mailuMailu missing authentication on PATCH /api/v1/token/<id>, which allows unauthenticated removal of IP restrictions7.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.4 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.4 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS4.4 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.9 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS4.8 Medium
- Show moreLoading…