Skip to content
OpenAdvisories

Archive

24 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /24 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

70 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-33473

    Vikunja has TOTP Reuse During Validity Window

    Vikunja is an open-source self-hosted task management platform. Starting in version 0.13 and prior to version 2.2.1, any user that has enabled 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.2.1 patches the issue.

    go-vikunja vikunja code.vikunja.io/api Go
  • Medium 6.5
    CVE-2026-33336

    Vikunja Desktop vulnerable to Remote Code Execution via same-window navigation

    Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper enables `nodeIntegration` in the main BrowserWindow and does not restrict same-window navigations. An a…

    go-vikunja vikunja
  • Medium 6.4
    CVE-2026-33335

    Vikunja Desktop allows arbitrary local application invocation via unvalidated shell.openExternal

    Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper passes URLs from `window.open()` calls directly to `shell.openExternal()` without any validation or pro…

    go-vikunja vikunja
  • Medium 6.5
    CVE-2026-33334

    Vikunja Desktop: Any frontend XSS escalates to Remote Code Execution due to nodeIntegration

    Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, the Vikunja Desktop Electron wrapper enables `nodeIntegration` in the renderer process without `contextIsolation` or `sandbox`. This means a…

    go-vikunja vikunja
  • Medium 6.9
    CVE-2026-33315

    Vikunja has a 2FA Bypass via Caldav Basic Auth

    Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, the Caldav endpoint allows login using Basic Authentication, which in turn allows users to bypass the TOTP on 2FA-enabled accounts. The user can then access standard proje…

    go-vikunja vikunja code.vikunja.io/api Go
  • Medium 5.3
    CVE-2026-33313

    Vikunja has an IDOR in Task Comments Allows Reading Arbitrary Comments

    Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, an authenticated user can read any task comment by ID, regardless of whether they have access to the task the comment belongs to, by substituting the task ID in the API UR…

    go-vikunja vikunja code.vikunja.io/api Go
  • Medium 5.4
    CVE-2026-28755 Public exploit

    NGINX ngx_stream_ssl_module vulnerability

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 4.7
    CVE-2026-33311

    @dicebear/core and @dicebear/initials Vulnerable to SVG Injection via Unsanitized Options

    DiceBear is an avatar library for designers and developers. Starting in version 5.0.0 and prior to versions 5.4.4, 6.1.4, 7.1.4, 8.0.3, and 9.4.1, SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not …

    dicebear dicebear @dicebear/core @dicebear/initials npm
  • Medium 6.5
    CVE-2026-4728

    Spoofing issue in the Privacy: Anti-Tracking component

    Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 6.2
    CVE-2019-25644

    WinMPG Video Convert 9.3.5 Buffer Overflow Local Denial of Service

    WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application by supplying oversized input. Attackers can paste a large payload of 6000 bytes into the Name…

    Winmpg WinMPG Video Convert Local Dos Exploit
  • Medium 6.2
    CVE-2019-25645

    WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service

    WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files. Attackers can create a specially crafted AVI file with an oversized buffer and load it t…

    Winavi WinAVI iPod/3GP/MP4/PSP Converter
  • Medium 6.2
    CVE-2019-25632

    phpFileManager 1.7.8 Local File Inclusion via index.php

    phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and filename parameters. Attackers can send GET requests to index.php with crafted par…

    Sourceforge phpFileManager
  • Medium 5.3
    CVE-2026-4649

    Auth bypass in Apache Artemis allows reading all internal messages

    Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message ( CVE-2026-27446 https://www.cve.org/CVERecord ). Since KNIME Business Hub uses Apache Ar…

    KNIME KNIME Business Hub artemis Ubuntu
  • Medium 6.1
    CVE-2026-4754

    CWE-79 in MolotovCherry Android-ImageMagick7

    CWE-79 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.

    MolotovCherry Android-ImageMagick7 Android
  • Medium 5.5
    CVE-2026-33855

    Integer Overflow or Wraparound in MolotovCherry Android-ImageMagick7

    Integer Overflow or Wraparound vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.

    MolotovCherry Android-ImageMagick7 Android
  • Medium 5.5
    CVE-2026-33853

    NULL Pointer Dereference in MolotovCherry Android-ImageMagick7

    NULL Pointer Dereference vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-10.

    MolotovCherry Android-ImageMagick7 Android
  • Medium 6.4
    CVE-2026-4752

    Use After Free in No-Chicken Echo-Mate

    Use After Free vulnerability in No-Chicken Echo-Mate.This issue affects Echo-Mate: before V250329.

    No-Chicken Echo-Mate
  • Medium 5.3
    CVE-2026-4751

    NULL Pointer Dereference in tmate-io tmate

    NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0.

    tmate-io tmate tmate tmate Debian Ubuntu
  • Medium 6.5
    CVE-2026-4749

    NVD-CWE-noinfo in albfan miraclecast

    NVD-CWE-noinfo vulnerability in albfan miraclecast.This issue affects miraclecast: before v1.0.

    albfan miraclecast
  • Medium 6.5
    CVE-2026-3138

    Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE

    The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and including, 3.1.2. This is due to the plugin's MVC framework dynamically registering unauthentic…

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 5.2
    CVE-2026-4743

    Null-Pointer Dereference Vulnerability in taurusxin/ncmdump

    NULL Pointer Dereference vulnerability in taurusxin ncmdump (‎src/utils‎ modules). This vulnerability is associated with program files cJSON.Cpp‎. This issue affects ncmdump: before 1.4.0.

    taurusxin ncmdump
  • Medium 5.3
    CVE-2026-4733

    Information disclosure in ixray-1.6-stcop

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.

    ixray-team ixray-1.6-stcop
  • Medium 6.8
    CVE-2026-33308

    mod_gnutls missing key purpose check in client certificate verification

    Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Prior to version 0.13.0, code for client certificate verification did not check the key purpose as set in the Extended Key Usage extension. An attacker with access to the private key for a valid cer…

    airtower-luna mod_gnutls mod-gnutls Ubuntu
  • Medium 6.5
    CVE-2026-3079

    LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter

    The LearnDash LMS plugin for WordPress is vulnerable to blind time-based SQL Injection via the 'filters[orderby_order]' parameter in the 'learndash_propanel_template' AJAX action in all versions up to, and including, 5.0.3. This is due to insufficient escapin…

    stellarwp LearnDash LMS Web / CMS
  • Medium 4.5
    CVE-2026-33306

    bcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRuby

    bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt implementation for JRuby can cause zero iterations in the strengthening loop. Impacted applications must be sett…

    bcrypt-ruby bcrypt-ruby bcrypt ruby-bcrypt Debian Ubuntu RubyGems
  • Medium 6.2
    CVE-2026-33320 Public exploit

    Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service

    Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memo…

    TomWright dasel vale github.com/tomwright/dasel Ubuntu Wolfi Go
  • Medium 5.4
    CVE-2026-29840

    JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within ap…

  • Medium 6.1
    CVE-2026-30661

    iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within t…

  • Medium 6.5
    CVE-2026-30655 Public exploit

    SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote att…

  • Medium 6.5
    CVE-2026-30662

    ConcreteCMS is vulnerable to Denial of Service During Bulk Downloads

    ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component. The 'download' method in 'concrete/controllers/backend/file.php' improperly manages memory when creating zip archives. It uses 'ZipArchive::addFromString' combi…

    concrete5/concrete5 Packagist