Skip to content
OpenAdvisories

Archive

1 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /1 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-42479

    An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (O…

    opencascade opencascade Debian Ubuntu
  • Medium 5.5
    CVE-2026-42478

    An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8…

    opencascade opencascade Debian Ubuntu
  • Medium 5.5
    CVE-2026-42481

    Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can …

    opencascade opencascade Debian Ubuntu
  • Medium 6.5
    CVE-2026-42475

    MixPHP Framework has an SQL injection vulnerability

    SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHelper.php.

    mix/mix Packagist
  • Medium 5.5
    CVE-2026-42477

    A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (…

    opencascade opencascade Debian Ubuntu
  • Medium 5.3
    CVE-2026-37504

    Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyControll…

  • Medium 6.9
    CVE-2026-37503

    Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is rendered using Blade …

  • Medium 4.9
    CVE-2026-37505

    SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort par…

  • Medium 6.5
    CVE-2026-26461

    A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticat…