Skip to content
OpenAdvisories

Archive

3 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /3 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • High 7.3
    CVE-2026-7679

    YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication

    A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/service/impl/OAuth2TokenServiceImpl.java. Performing a manipulati…

    YunaiV yudao-cloud
  • Medium 6.3
    CVE-2026-7678

    YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection

    A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoViewDataServiceImpl.java. Such manipulation leads to sql injecti…

    YunaiV yudao-cloud
  • Low 3.5
    CVE-2026-7677

    kerwincui FastBee System Notice SysNoticeController.java add cross site scripting

    A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. Thi…

    kerwincui FastBee
  • Medium 4.3
    CVE-2026-7676

    kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal

    A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpo…

    kerwincui FastBee
  • High 8.8
    CVE-2026-7675

    Shenzhen Libituo Technology LBT-T300-HW1 apply.cgi start_lan buffer overflow

    A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow. The attack is possible to be carrie…

    Shenzhen Libituo Technology LBT-T300-HW1
  • High 8.8
    CVE-2026-7674

    Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflow

    A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects the function start_single_service of the component Web Management Interface. Executing a manipulation of the argument vpn_pptp_server/vpn_l2tp_server can lead to…

    Shenzhen Libituo Technology LBT-T300-HW1
  • Medium 4.7
    CVE-2026-7673

    crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload

    A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/UploadServiceImpl.java of the component Admin Upload. Performing a manipulation of the …

  • Medium 5.3
    CVE-2026-40561

    Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence

    Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Trans…

    KAZUHO Starlet starlet starlet Debian Ubuntu Alpine
  • Medium 6.3
    CVE-2026-7672

    youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection

    A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList of the file src/main/java/com/youlai/boot/system/controller/UserController.java of the component Users Endpoint. Such manipulation of the …

    youlaitech youlai-boot