Skip to content
OpenAdvisories

Archive

8 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /8 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-44656 Public exploit

    Vim: OS Command Injection via 'path' completion

    Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2026-41575 Public exploit

    th30d4y/IP: DOM-Based Cross-Site Scripting (XSS) Vulnerability

    In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was directly rendered in the browser, allowing attackers to execute a…

    th30d4y IP
  • Medium 5.3
    CVE-2023-47268 Public exploit

    In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitra…

    slic3r-prusa slic3r-prusa Debian Ubuntu
  • Medium 6.3
    CVE-2024-33722 Public exploit

    SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].

  • Medium 6.3
    CVE-2024-30167 Public exploit

    /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary com…

  • Medium 6.3
    CVE-2025-67886 Public exploit

    Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Transla…