Skip to content
OpenAdvisories

Archive

20 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /20 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2026-33154 Public exploit

    dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver

    dynaconf is a configuration management tool for Python. Prior to version 3.2.13, Dynaconf is vulnerable to Server-Side Template Injection (SSTI) due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates…

    dynaconf dynaconf python-dynaconf dynaconf Debian Ubuntu PyPI
  • High 7.8
    CVE-2026-33150 Public exploit

    Use After Free in libfuse

    libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the io_uring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arb…

    libfuse libfuse fuse3 Debian
  • High 7.3
    CVE-2026-33147 Public exploit

    GMT: Stack-based Buffer Overflow in gmt_remote_dataset_id

    GMT is an open source collection of command-line tools for manipulating geographic and Cartesian data sets. In versions from 6.6.0 and prior, a stack-based buffer overflow vulnerability was identified in the gmt_remote_dataset_id function within src/gmt_remot…

    GenericMappingTools gmt
  • High 8.6
    CVE-2026-32710 Public exploit

    Heap-based Buffer Overflow in MariaDB

    MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the cras…

    MariaDB server mariadb mariadb Debian Ubuntu Wolfi
  • High 8.4
    CVE-2026-32945 Public exploit

    PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

    PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such a…

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-4447 Public exploit

    Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitr…

    Google Chrome chromium chromium Browsers Debian Wolfi
  • High 8.8
    CVE-2026-4444 Public exploit

    Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially explo…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi