CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- gitpython-developers gitpythonGitPython before 3.1.59 Local File Content Disclosure via .gitmodules8.6 High
- getgrav gravGrav before 2.0.16 Information Disclosure via Twig Sandbox8.7 High
- getgrav gravGrav before 2.0.16 Information Disclosure via offsetGet8.7 High
- rocket.chatRocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor Method6.9 Medium
- getgrav gravGrav before 4.2.2 Remote Code Execution via Email Twig8.7 High
- getgrav gravGrav CMS before 2.0.16 Origin Validation Bypass via Referer9.3 Critical
- getgrav gravGrav CMS before 2.0.16 Timing Attack via verifyNonce6.3 Medium
- getgrav gravGrav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison8.7 High
- getgrav grav-plugin-loginGrav Login Plugin before 3.9.1 Email Enumeration via Registration9.3 Critical
- getgrav gravGrav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass7.1 High
- getgrav gravGrav CMS before 2.0.16 Path Traversal via media_directory7.1 High
- getgrav gravGrav CMS before 2.0.16 Symlink Following via createLockFile8.6 High
- getgrav gravGrav before 2.0.16 Path Traversal via MediaUploadTrait deleteFile7.1 High
- getgrav gravGrav Login Plugin before 1.0.16 Privilege Escalation via Unlock9.3 Critical
- getgrav gravGrav before 3.9.2 Host Header Injection via sendInvitationEmail8.7 High
- getgrav gravGrav API Plugin before 1.0.16 SSRF via DNS Rebinding6.9 Medium
- getgrav gravGrav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode8.3 High
- vrana adminerAdminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking6.1 Medium
- vrana adminerAdminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection9.3 Critical
- vrana adminerAdminer before 5.4.3 Cross-Site Scripting via MySQL Version String5.3 Medium
- vrana adminerAdminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO8.6 High
- vrana adminerAdminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload7.1 High
- vrana adminerAdminer before 5.4.3 Arbitrary File Deletion via SQLite Drop7.2 High
- vrana adminerAdminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write5.3 Medium
- vrana adminerAdminer before 5.5.0 SSRF via PDO DSN Injection6.9 Medium
- vrana adminerAdminer before 5.5.0 Open Redirect via X-Forwarded-Prefix5.3 Medium
- vrana adminerAdminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass2.3 Low
- wpdevteam betterlinks – link shortener, link cloaking, redirects, affiliate link manager & mcpBetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action4.3 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action6.5 Medium
- hookandhook wp courses lms – online courses builder, elearning courses, courses solution, education coursesWP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter4.3 Medium
- sap se s/4hana (manage supply protection)Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)7.5 High
- academysoftwarefoundation openexrOpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding5.5 Medium
mapserverOSS-FuzzStack-buffer-overflow in msLayoutTextSymbolNo scorehobbesOSS-FuzzHeap-buffer-overflow in yylexNo scoretarantoolOSS-FuzzHeap-buffer-overflow in lua_errorNo score- No product listedThe /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect...7.5 High
aria2Debianaria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function.4.0 Medium- opensslInvalid Pointer Dereference in CMP Server via Crafted protectionAlg7.5 High
- opensslQUIC ACK-only Packet Retention Can Cause Memory Exhaustion7.5 High
- opensslCMP Indefinite Cache Growth of ExtraCerts5.9 Medium
- opensslUntrusted Sender DN Used as Format String in CMP Response Validation9.8 Critical
- opensslHeap Buffer Overflow in CMS Key Unwrapping7.5 High
- opensslExcessive Memory Use Buffering DTLS Records for a Future Epoch7.5 High
libtiffAzure Linux,tiffDebian,libtiff-develRed Hat +2 more +4 moreAn issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...8.4 HighgpacDebianBuffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker...7.8 High- No product listedAn issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter...9.8 Critical
sqliteRed Hat,sqlite3Debian,lemonRed Hat +7 more +9 moreBuffer Overflow vulnerability in SQLite affected version source snapshots/builds containing...4.0 Medium- No product listedGazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a...5.4 Medium
- No product listedA Stored XSS vulnerability in the subtitle deletion flow in GazellePW (GazellePosterWall) commit...5.4 Medium
- No product listedA Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit...6.1 Medium
- Show moreLoading…