Skip to content
OpenAdvisories

Archive

13 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /13 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-33657 Public exploit

    EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field

    EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard (non-administrative) privileges to inject arbitrary HTML into system-g…

    espocrm espocrm
  • Medium 4.3
    CVE-2026-33534 Public exploit Scanner template

    EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

    EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated Server-Side Request Forgery (SSRF) vulnerability that allows bypassing the internal-host validation logic by using alternative IPv4 represen…

    espocrm espocrm
  • Medium 5.4
    CVE-2026-6201 Public exploit

    CodeAstro Online Job Portal Delete Job Posting job-delete.php access control

    A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls…

    CodeAstro Online Job Portal
  • Medium 6.6
    CVE-2026-21010 Public exploit

    Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged f…

    Samsung Mobile Samsung Mobile Devices
  • Medium 5.1
    CVE-2026-21008 Public exploit

    Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensiti…

    Samsung Mobile Samsung Mobile Devices
  • Medium 5.1
    CVE-2026-21014 Public exploit

    Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. Us…

    Samsung Mobile Samsung Camera
  • Medium 6.9
    CVE-2026-21013 Public exploit

    Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive i…

    Samsung Mobile Galaxy Wearable
  • Medium 6.8
    CVE-2026-21012 Public exploit

    External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create …

    Samsung Mobile Samsung Mobile Devices
  • Medium 5.4
    CVE-2026-21011 Public exploit

    Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attacke…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.1
    CVE-2026-21009 Public exploit

    Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.4
    CVE-2026-21007 Public exploit

    Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to b…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.7
    CVE-2026-21006 Public exploit

    Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden no…

    Samsung Mobile Samsung Mobile Devices
  • Medium 5.2
    CVE-2026-21003 Public exploit

    Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attac…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.0
    CVE-2026-33555 Public exploit

    An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches…

    HAProxy HAProxy haproxy haproxy Debian Ubuntu Azure Linux Wolfi
  • Medium 6.2
    CVE-2026-29628 Public exploit

    A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to caus…

    tinyobjloader Ubuntu
  • Medium 6.5
    CVE-2026-31280 Public exploit

    An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to caus…