Skip to content
OpenAdvisories

Archive

8 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /8 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-3766

    SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

    A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The atta…

    SourceCodester Web-based Pharmacy Product Management System
  • Low 3.5
    CVE-2026-3743

    YiFang CMS D_singlePageGroup.php update cross site scripting

    A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The explo…

    YiFang CMS
  • Low 3.5
    CVE-2026-3742

    YiFang CMS D_singlePage.php update cross site scripting

    A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePage.php. Performing a manipulation of the argument Title results in cross site scripting. It is possible to initiate the attack rem…

    YiFang CMS
  • Low 3.5
    CVE-2026-3741

    YiFang CMS D_friendLink.php update cross site scripting

    A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D_friendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from r…

    YiFang CMS
  • Low 3.5
    CVE-2026-3721

    1024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross site scripting

    A weakness has been identified in 1024-lab/lab1024 SmartAdmin up to 3.29. The affected element is an unknown function of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/helpdoc/domain/form/HelpDocAddForm.java of the component Help Documentat…

    1024-lab lab1024 SmartAdmin SmartAdmin
  • Low 3.5
    CVE-2026-3720

    1024-lab/lab1024 SmartAdmin Notice notice-form-drawer.vue cross site scripting

    A security flaw has been discovered in 1024-lab/lab1024 SmartAdmin up to 3.29. Impacted is an unknown function of the file smart-admin-web-javascript/src/views/business/oa/notice/components/notice-form-drawer.vue of the component Notice Module. The manipulati…

    1024-lab lab1024 SmartAdmin SmartAdmin
  • Low 2.4
    CVE-2026-3716

    Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting

    A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting. It is possible to launch the at…

    WAVLINK WL-WN579X3-C
  • Low 3.7
    CVE-2026-3706

    mkj Dropbear S Range Check curve25519.c unpackneg signature verification

    A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiate…

    mkj Dropbear dropbear dropbear Debian Ubuntu