CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- exceljsexceljs through 4.4.0 Path Traversal via Unvalidated addImage filename8.7 High
- exceljsexceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization9.3 Critical
- exceljsexceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression8.7 High
- bentomlBentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space6.9 Medium
- bruno cavalcante ghostwriterGhostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints5.3 Medium
- bruno cavalcante ghostwriterGhostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap7.1 High
- aureus erpDolibarr ERP User Notes note.php authorization5.3 Medium
- No product listedOpen5GS AMF UEContextReleaseRequest Path improper authorization5.3 Medium
- No product listedOpen5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds5.3 Medium
- No product listedOneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().8.1 High
- No product listedAn integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit...7.5 High
- No product listedAn out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of...6.5 Medium
- No product listedAn out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage...7.1 High
- No product listedA stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec...7.5 High
aria2DebianAria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc,...6.2 MediumlibtiffAzure Linux,tiffDebian,libtiff-develRed Hat +2 more +4 moreAn integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip...7.8 HighlibtiffAlmaLinux,tiffAlpaquita,libtiff-debuginfoRed Hat +6 more +8 moreAn issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...9.8 Critical- No product listedA local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode...7.8 High
- No product listedIn D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute...8.1 High
- No product listedD-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter...8.1 High
- No product listedA cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot...6.1 Medium
- No product listedOpen5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow5.3 Medium
- ggml-org llama.cppggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference6.9 Medium
- ggml-org llama.cppggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization6.9 Medium
- ctfdCTFd __init__.py _is_safe_url redirect5.3 Medium
- code-projects barangay resident profiling management systemcode-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization5.3 Medium
- code-projects barangay resident profiling management systemcode-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection6.9 Medium
- code-projects barangay resident profiling management systemcode-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization5.3 Medium
- tenda ch22Tenda CH22 exeCommand formexeCommand command injection5.3 Medium
libdbd-pg-perlUbuntu,perl-DBD-PgopenSUSE +1 moreDBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float9.8 Critical- dromara ujcmsDromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine5.1 Medium
- No product listedApache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey3.7 Low
- No product listedReverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line5.3 Medium
- emilstenstrom justhtmljusthtml before 3.11.0 XSS via selectedcontent projection5.1 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization5.3 Medium
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab8.5 High
- ongres stackgresUntrusted Search Path in StackGres9.9 Critical
- itsourcecode hospital management system project in phpitsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection5.3 Medium
- braveBrave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview4.3 Medium
- braveBrave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters7.1 High
- alex content maskContent Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask2.7 Low
- unknown woocommerce bookings, woocommerce bookings +1 moreWooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization4.3 Medium
- unknown restrictmateRestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator9.8 Critical
- tenda ch22Tenda CH22 editFileName formeditFileName command injection5.3 Medium
- vas3k taxhackervas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials6.9 Medium
- vas3k taxhackervas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery5.3 Medium
- sourcecodester stock management systemSourceCodester Stock Management System getOrderReport.php cross site scripting5.3 Medium
- sourcecodester stock management systemSourceCodester Stock Management System printOrder.php cross site scripting5.3 Medium
- cyber-iii student-management-systemsambitraj Student-Management-System Management Mutation sql injection5.3 Medium
- cyber-iii student-management-systemsambitraj Student-Management-System Dashboard sql injection5.3 Medium
- Show moreLoading…