Skip to content
OpenAdvisories

Archive

27 April 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.6
    CVE-2026-3008 Public exploit

    Vulnerability in Notepad++

    Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.

  • Medium 4.3
    CVE-2026-7089 Public exploit

    code-projects Home Service System Appointment Booking booking.php cross site scripting

    A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site sc…

  • Medium 5.3
    CVE-2026-7071 Public exploit

    CodeAstro Online Job Portal user-cvs file information disclosure

    A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file and directory information exposure. Remote exploitation of t…

  • Medium 6.1
    CVE-2026-29971 Public exploit

    A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. …