Skip to content
OpenAdvisories

Archive

22 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /22 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-33296

    AVideo has an Open Redirect via Unvalidated redirectUri in userLogin.php

    WWBN AVideo is an open source video platform. Prior to version 26.0, WWBN/AVideo contains an open redirect vulnerability in the login flow where a user-supplied redirectUri parameter is reflected directly into a JavaScript `document.location` assignment witho…

    WWBN AVideo wwbn/avideo Packagist
  • Low 3.1
    CVE-2026-4549

    mickasmt next-saas-stripe-starter Stripe API open-customer-portal.ts openCustomerPortal authorization

    A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploita…

    mickasmt next-saas-stripe-starter
  • Low 3.7
    CVE-2026-4115

    PuTTY Ed25519 Signature ecc-ssh.c eddsa_verify signature verification

    A vulnerability was detected in PuTTY 0.83. Affected is the function eddsa_verify of the file crypto/ecc-ssh.c of the component Ed25519 Signature Handler. The manipulation results in improper verification of cryptographic signature. The attack may be performe…

    putty putty Debian Ubuntu
  • Low 2.4
    CVE-2026-4544

    Wavlink WL-WN578W2 POST Request login.cgi cross site scripting

    A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cross site sc…

    WAVLINK WL-WN578W2
  • Low 2.5
    CVE-2026-4541

    janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification

    A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature.…

    janmojzis tinyssh tinyssh tinyssh Debian Ubuntu
  • Low 3.3
    CVE-2026-4539

    pygments archetype.py AdlLexer redos

    A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local…

    open-webui katib-suggestion-hyperopt katib-earlystopping katib-suggestion-skopt-enas Debian Ubuntu Wolfi PyPI
  • Low 2.0
    CVE-2026-33550

    SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits ins…

    Alinto SOGo sogo sogo Debian Ubuntu