Skip to content
OpenAdvisories

Archive

13 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /13 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-44376 Public exploit

    CubeCart: Reflected XSS in Store Search Bar

    CubeCart is an ecommerce software solution. Prior to 6.7.0, an unauthenticated Reflected XSS vulnerability exists in the CubeCart v6.x search feature. Due to a logic flaw in classes/catalogue.class.php, user input is reflected without sanitization only when a…

    cubecart v6
  • Medium 6.6
    CVE-2026-0264 Public exploit

    PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution

    A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Pri…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.8
    CVE-2026-42926 Public exploit

    NGINX ngx_http_proxy_v2_module vulnerability

    When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached …

    F5 NGINX Open Source nginx nginx-mainline Network devices Debian Wolfi
  • Medium 4.8
    CVE-2026-40701 Public exploit

    NGINX ngx_http_ssl_module vulnerability

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver. With th…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.1
    CVE-2026-21020 Public exploit

    Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to tr…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.8
    CVE-2026-21018 Public exploit

    Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrar…

    Samsung Mobile Samsung Mobile Devices
  • Medium 5.1
    CVE-2026-21016 Public exploit

    Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sens…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.8
    CVE-2026-21015 Public exploit

    Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique i…

    Samsung Mobile Samsung Mobile Devices
  • Medium 5.6
    CVE-2025-29338 Public exploit

    NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buf…

  • Medium 6.5
    CVE-2026-31156 Public exploit

    A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program co…