CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- red hat certificate system 10, certificate system 11, enterprise linux 10 +4 more +6 moreJss: jss: jsstrustmanager does not verify nss trust flags on ca certificates6.5 Medium
- roskus prospero flow crmUnrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVG4.8 Medium
- itsourcecode online pharmacy systemitsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload6.9 Medium
- codeastro real estate management systemitsourcecode Real Estate Management System search.php sql injection6.9 Medium
- gohugo hugoHugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Values4.8 Medium
- gohugoio hugoHugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation8.3 High
- spring micrometerMicrometer instrumentation of Apache HttpAsyncClient DoS vulnerability5.9 Medium
- delta electronics diaenergieDIAEnergie - SQL Injection8.8 High
- delta electronics diaenergieDIAEnergie - SQL Injection8.8 High
- delta electronics diaenergieDIAEnergie - SQL Injection8.8 High
- delta electronics diaenergieDIAEnergie - SQL Injection8.8 High
- canonical lxdInstance template path traversal allows arbitrary host file write as root9.9 Critical
- dji air 3, air 3s, avata 2 +13 more +15 moreDJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion6.0 Medium
- dji air 3, air 3s, avata 2 +13 more +15 moreDJI Drone Bluetooth Interface Unauthenticated DUML Command Execution8.5 High
- joomlack.fr page builder ck extension for joomlaJoomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.55.3 Medium
- joomlack.fr page builder ck extension for joomlaJoomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.59.3 Critical
- dji air 3, air 3s, avata 2 +13 more +15 moreDJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media8.7 High
- dji air 3, air 3s, avata 2 +13 more +15 moreDJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory9.3 Critical
- murrelektronik 6 tx m ge + 4 power m12 ip67, xelity 10 tx ip67 m fe 4p, xelity 10 tx ip67 m fe 5p +20 more +22 moreInformation Disclosure via 'Copy learned MAC Addresses' Function5.3 Medium
- codeastro payroll systemitsourcecode Payroll System admin_class.php save_settings unrestricted upload6.9 Medium
- codeastro payroll systemitsourcecode Payroll System admin_class.php login sql injection6.9 Medium
- itsourcecode library management systemitsourcecode Library Management System editbooks.php sql injection5.3 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System view_prod.php sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_user sql injection6.9 Medium
- sakura editor development community editorSakura Editor provided by Sakura Editor Development Community contains an OS command injection...8.4 High
- achorein expo-share-intentachorein expo-share-intent Android File Copy Routine ExpoShareIntentModule.kt getDataColumn path traversal4.8 Medium
- piwigoPiwigo Public Authentication cross site scripting2.3 Low
- No product listedOpen5GS HSS hss-cx-path.c assertion5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_edit.php sql injection5.3 Medium
- hepta platforms heptabaseHepta Platforms｜Heptabase - Stored Cross-Site Scripting6.2 Medium
- shenzhen gongji technology xbrother dynamic environment monitoring systemShenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection6.9 Medium
- 4mosan security technology management center4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read8.7 High
- cybertutor newsiteserver (nss)CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload5.1 Medium
- 4mosan security technology gcb doctor4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection9.3 Critical
- cybertutor newsiteserver (nss)CyberTutor｜NewSiteServer (NSS) - Missing Authentication6.9 Medium
- ractivejs ractiveractivejs ractive Keypath Ractive#set prototype pollution6.9 Medium
- rapid7 velociraptorVelociraptor Analyst overwrites live built-in artifacts through verify()8.9 High
- alibaba-fusion nextalibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution6.9 Medium
- rexrainbow phaser3-rex-notesrexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution5.3 Medium
- No product listedjQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution6.9 Medium
- tanstack devtools-viteTanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection2.0 Low
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System processlogin.php sql injection6.9 Medium
- utt hiper 1200gwUTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow8.7 High
- utt hiper 1250gwUTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow9.4 Critical
- efm iptime t24000mEFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication9.3 Critical
- efm iptime t16000mEFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication10.0 Critical
- provectus kafka-uiprovectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection5.3 Medium
- warmcat libwebsocketswarmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write6.9 Medium
- exceljsexceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values8.4 High
- Show moreLoading…