Skip to content
OpenAdvisories

Archive

15 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /15 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-4186

    UEditor JSONP Callback controller.php cross site scripting

    A vulnerability was determined in UEditor up to 1.4.3.2. This issue affects some unknown processing of the file php/controller.php?action=uploadimage of the component JSONP Callback Handler. This manipulation of the argument callback causes cross site scripti…

  • Low 3.5
    CVE-2026-4175

    Aureus ERP Chatter Message content-text-entry.blade.php cross site scripting

    A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message…

    Aureus ERP aureuserp/aureuserp Packagist
  • Low 3.3
    CVE-2026-4174

    Radare2 Mach-O File mach0.c walk_exports_trie resource consumption

    A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed…

    radare2 Ubuntu
  • Low 2.4
    CVE-2026-4169

    Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting

    A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function F_xml_export_users of the file admin/code/tce_xml_users.php of the component XML Export. Performing a manipulation results in cross site scripting. Remote exploitatio…

    Tecnick TCExam
  • Low 2.4
    CVE-2026-4168

    Tecnick TCExam Group tce_edit_group.php cross site scripting

    A vulnerability was identified in Tecnick TCExam 16.5.0. This impacts an unknown function of the file /admin/code/tce_edit_group.php of the component Group Handler. Such manipulation of the argument Name leads to cross site scripting. The attack may be launch…

    Tecnick TCExam
  • Low 3.5
    CVE-2026-4166

    Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting

    A vulnerability was found in Wavlink WL-NU516U1 240425. The impacted element is the function sub_404F68 of the file /cgi-bin/login.cgi. The manipulation of the argument homepage/hostname results in cross site scripting. The attack can be launched remotely. Th…

    WAVLINK WL-NU516U1
  • Low 2.4
    CVE-2026-4165

    Worksuite HR, CRM and Project Management create cross site scripting

    A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unknown function of the file /account/orders/create. The manipulation of the argument Client Note leads to cross site scripting. The attack can…

    Worksuite HR, CRM and Project Management