Skip to content
OpenAdvisories

Archive

February 2026

Vulnerabilities first published in this month (UTC), newest first.

← January 2026 2026 / February March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-3171 Public exploit

    SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting

    A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site …

    SourceCodester Patrick Mvuma Patients Waiting Area Queue Management System Patients Waiting Area Queue Management System
  • Low 3.5
    CVE-2024-55271 Public exploit

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This iss…

  • Low 3.5
    CVE-2025-43537 Public exploit

    A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS …

    Apple iOS and iPadOS iOS
  • Low 2.4
    CVE-2026-2222 Public exploit

    code-projects Online Reviewer System btn_functions.php cross site scripting

    A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lea…

    code-projects Online Reviewer System
  • Low 1.1
    CVE-2026-1337 Public exploit

    Insufficient escaping of unicode characters in query log

    Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisor…

    neo4j Enterprise Edition Community Edition neo4j-2025.10 Wolfi Maven