Skip to content
OpenAdvisories

Archive

5 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /5 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.2
    CVE-2019-25677 Public exploit

    WinRAR 5.61 Denial of Service via Malformed Language File

    WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the t…

    Win-Rar WinRAR
  • High 7.3
    CVE-2026-5562 Public exploit Scanner template

    provectus kafka-ui Endpoint testexecutions validateAccess code injection

    A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. …

    provectus kafka-ui
  • Medium 6.3
    CVE-2026-5556 Public exploit

    badlogic pi-mono loader.ts discoverAndLoadExtensions code injection

    A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote ex…

    badlogic pi-mono
  • High 7.3
    CVE-2026-5555 Public exploit

    code-projects Concert Ticket Reservation System Parameter login.php sql injection

    A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email…

    code-projects Concert Ticket Reservation System
  • Medium 6.3
    CVE-2026-5530 Public exploit

    Ollama Model Pull API download.go server-side request forgery

    A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The…