Skip to content
OpenAdvisories

Archive

3 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /3 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-28289 Public exploit EPSS 35%

    FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Execution

    FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.206 and earlier allows any authenticated user with file upload permissions to achieve Remote Code Execution (RC…

    freescout-help-desk freescout
  • Critical 9.2
    CVE-2026-27971 Public exploit Scanner template

    Qwik affected by unauthenticated RCE via server$ Deserialization

    Qwik is a performance focused javascript framework. qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any unauthenticated user to execute arbitrary code on the server with a single HTTP …

    QwikDev qwik @builder.io/qwik npm
  • Medium 5.1
    CVE-2026-24415 Public exploit

    OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter

    OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contains Reflected XSS vulnerabilities in invoice/order/contract modification modals. The application fails to properly sanitize use…

    devcode-it openstamanager devcode-it/openstamanager Packagist
  • Medium 4.3
    CVE-2026-3494 Public exploit

    MariaDB Server Audit Plugin Comment Handling Bypass

    In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…

    amazon MariaDB MariaDB Server RDS for MySQL Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2025-59059 Public exploit

    Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

    Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

    Apache Software Foundation Apache Ranger druid trino-plugin-ranger Wolfi Maven
  • Critical 9.8
    CVE-2026-1492 Public exploit Scanner template EPSS 29%

    User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

    The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. Th…

    WPEverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder Web / CMS
  • High 7.1
    CVE-2025-66680 Public exploit

    An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to del…