Skip to content
OpenAdvisories

Archive

29 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /29 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-7401 Public exploit

    SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting

    A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument studen…

    SourceCodester CET Automated Grading System with AI Predictive Analytics
  • Medium 4.7
    CVE-2026-7394 Public exploit

    SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection

    A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can…

    SourceCodester Pizzafy Ecommerce System
  • Medium 4.7
    CVE-2026-7393 Public exploit

    SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

    A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file /admin/admin_class_novo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted…

    SourceCodester Pizzafy Ecommerce System
  • Medium 6.3
    CVE-2026-7392 Public exploit

    SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection

    A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function delete_supplier of the file /ajax.php?action=delete_supplier. Such manipulation of the argument ID leads to sql injection. The attack can be ex…

    SourceCodester Pharmacy Sales and Inventory System
  • Critical 9.8
    CVE-2026-41940 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    WebPros cPanel and WHM Authentication Bypass via Login Flow

    cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

    WebPros cPanel WP Squared WHM
    KEV Apr 30, 2026
  • High 7.7
    CVE-2026-42249 Public exploit

    Remote Code Execution in Ollama via Update Mechanism

    Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading updates, the application constructs local file paths using values derived from HT…

    Ollama Ollama
  • High 7.7
    CVE-2026-42248 Public exploit

    Missing Signature Verification for Updates in Ollama

    Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verification routine unconditionally returns success so no digital signature or trust…

    Ollama Ollama
  • Medium 6.1
    CVE-2025-56537 Public exploit

    A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execut…

    opennebula Ubuntu
  • Medium 6.1
    CVE-2025-56534 Public exploit

    A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers …

    opennebula Ubuntu
  • Medium 6.1
    CVE-2025-56536 Public exploit

    A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scr…

    opennebula Ubuntu
  • Medium 6.1
    CVE-2025-56535 Public exploit

    A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or…

    opennebula Ubuntu