Skip to content
OpenAdvisories

Archive

22 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /22 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-2947

    rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting

    A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site …

    rymcu forest
  • Low 3.5
    CVE-2026-2946

    rymcu forest Article Content/Comments/Portfolio XssUtils.java XssUtils.replaceHtmlCode cross site scripting

    A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected by this issue is the function XssUtils.replaceHtmlCode of the file src/main/java/com/rymcu/forest/util/XssUtils.java of the component Article Content/Comments/Portfolio. The mani…

    rymcu forest
  • Low 2.4
    CVE-2026-2939

    itsourcecode Student Management System Add Student add_student cross site scripting

    A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the …

    itsourcecode Student Management System
  • Low 2.4
    CVE-2026-2934

    YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting

    A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/db/admin/D_friendLinkGroup.php of the component Extended Management Module. The manipulation of the argument Name leads to cross site script…

    YiFang CMS
  • Low 2.4
    CVE-2026-2933

    YiFang CMS Extended Management D_adManage.php update cross site scripting

    A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_adManage.php of the component Extended Management Module. Executing a manipulation of the argument Name can lead to cross site scripting. The…

    YiFang CMS
  • Low 2.4
    CVE-2026-2932

    YiFang CMS Extended Management D_adPosition.php update cross site scripting

    A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in c…

    YiFang CMS
  • Low 2.5
    CVE-2026-2913

    libvips source.c vips_source_read_to_memory heap-based overflow

    A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local…

    vips vips libvips-8.17 libvips-doc Debian Ubuntu Wolfi
  • Low 3.3
    CVE-2026-2903

    skvadrik re2c ast.cc check_and_merge_special_rules null pointer dereference

    A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of the file src/parse/ast.cc. This manipulation causes null pointer dereference. The attack can only be executed locally. The exploit has been published a…

    skvadrik re2c re2c re2c Debian Ubuntu Azure Linux
  • Low 2.4
    CVE-2026-2897

    funadmin Backend index.html cross site scripting

    A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site script…

    funadmin/funadmin Packagist