Skip to content
OpenAdvisories

Archive

22 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /22 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-2588

    Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems

    Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits whi…

    TIMLEGGE Crypt::NaCl::Sodium
  • Critical 9.8
    CVE-2019-25459

    Web Ofisi Emlak V2 SQL Injection via emlak-ara.html

    Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into parameters like emlak_durumu, emlak_tipi, il, ilc…

    Web-ofisi Emlak
  • Critical 9.8
    CVE-2019-25458

    Web Ofisi Firma Rehberi v1 SQL Injection via firmalar.html

    Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can send requests to with malicious payloads in the 'il', 'kat', or…

    Web-ofisi Firma Rehberi
  • Critical 9.1
    CVE-2019-25456

    Web Ofisi Emlak v2 SQL Injection via ara Parameter

    Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to ext…

    Web-ofisi Emlak