Skip to content
OpenAdvisories

Archive

23 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /23 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-33168

    Rails has a possible XSS vulnerability in its Action View tag helpers

    Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed…

    rails actionview rails rails Debian Ubuntu Wolfi RubyGems
  • Low 1.3
    CVE-2026-33167

    Rails has a possible XSS vulnerability in its Action Pack debug exceptions

    Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary …

    rails actionpack rails actionpack Ubuntu Wolfi RubyGems
  • Low 3.5
    CVE-2026-4596

    projectworlds Lawyer Management System lawyers.php cross site scripting

    A vulnerability was identified in projectworlds Lawyer Management System 1.0. This issue affects some unknown processing of the file /lawyers.php. The manipulation of the argument first_Name leads to cross site scripting. The attack may be initiated remotely.…

    Project Worlds Lawyer Management System
  • Low 2.4
    CVE-2026-4595

    code-projects Exam Form Submission update_s6.php cross site scripting

    A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched rem…

    code-projects Exam Form Submission
  • Low 3.1
    CVE-2026-4590

    kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery

    A security flaw has been discovered in kalcaddle kodbox 1.64. The impacted element is an unknown function of the file /workspace/source-code/plugins/oauth/controller/bind/index.class.php of the component loginSubmit API. Performing a manipulation of the argum…

    kalcaddle kodbox
  • Low 3.7
    CVE-2026-4588

    kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key

    A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the component Site-level API key Handler. This manipulation of the argument sk ca…

    kalcaddle kodbox
  • Low 3.7
    CVE-2026-4587

    HybridAuth SSL Curl.php certificate validation

    A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The att…

    hybridauth/hybridauth Packagist
  • Low 3.1
    CVE-2026-4584

    Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission

    A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack requires access to t…

    Shenzhen HCC Technology MPOS M6 PLUS
  • Low 3.7
    CVE-2026-4633

    Keycloak: keycloak: user enumeration via differential error messages

    A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disc…

    Red Hat Red Hat Build of Keycloak Red Hat build of Keycloak 26.4.12 keycloak-26.5 Wolfi Maven
  • Low 2.4
    CVE-2026-4578

    code-projects Exam Form Submission update_s3.php cross site scripting

    A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_s3.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack may be launched…

    code-projects Exam Form Submission
  • Low 2.4
    CVE-2026-4577

    code-projects Exam Form Submission update_s4.php cross site scripting

    A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/update_s4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated rem…

    code-projects Exam Form Submission
  • Low 2.4
    CVE-2026-4576

    code-projects Exam Form Submission update_s5.php cross site scripting

    A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /admin/update_s5.php. Such manipulation of the argument sname leads to cross site scripting. The attack can be launched remotely. The exploit…

    code-projects Exam Form Submission
  • Low 2.4
    CVE-2026-4575

    code-projects Exam Form Submission update_s2.php cross site scripting

    A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s2.php. This manipulation of the argument sname causes cross site scripting. The attack can be initiated remotely. The exploi…

    code-projects Exam Form Submission