Skip to content
OpenAdvisories

Archive

24 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /24 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-23859

    Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulner…

    Dell Wyse Management Suite
  • Low 2.7
    CVE-2024-48928

    Piwigo's secret key can be brute forced

    Piwigo is an open source photo gallery application for the web. In versions on the 14.x branch, when installing, the secret_key configuration parameter is set to MD5(RAND()) in MySQL. However, RAND() only has 30 bits of randomness, making it feasible to brute…

    Piwigo Piwigo
  • Low 2.3
    CVE-2026-23983

    Apache Superset: Sensitive Data Exposure via REST API (disabled by default)

    A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The Tag endpoint (disabled by default) allows users to retrieve a list of objects associated with a specific tag. When these…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Low 2.9
    CVE-2026-1229

    Incorrect calculation in CIRCL secp384r1 CombinedMult

    The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed…

    Cloudflare CIRCL zot kubescape Ubuntu Alpine Wolfi Go
  • Low 3.8
    CVE-2025-15589

    MuYuCMS Template Management Template.php delete_dir_file path traversal

    A vulnerability was determined in MuYuCMS 2.7. Affected is the function delete_dir_file of the file application/admin/controller/Template.php of the component Template Management Page. This manipulation of the argument temn/tp causes path traversal. It is pos…

  • Low 3.5
    CVE-2026-3050

    horilla-opensource horilla Leads global.js cross site scripting

    A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the component Leads Module. This manipulation of the argument Notes causes cross site scripting. The attack is possible …

    horilla-opensource horilla