Skip to content
OpenAdvisories

Archive

13 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /13 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

171 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-8199

    Post-auth memory exhaustion via bitwise match expressions

    An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts Mon…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.2
    CVE-2024-48519

    Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attac…

  • Medium 6.2
    CVE-2024-51395

    Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local …

  • Medium 5.5
    CVE-2024-51394

    Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local …

  • Medium 5.6
    CVE-2025-29338 Public exploit

    NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buf…

  • Medium 5.0
    CVE-2025-27852

    The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attac…

  • Medium 6.8
    CVE-2026-36742

    Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnecte…

  • Medium 6.8
    CVE-2026-36738

    U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes…

  • Medium 6.5
    CVE-2026-31156 Public exploit

    A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program co…

  • Medium 6.5
    CVE-2026-37429

    qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the Sys…

  • Medium 6.5
    CVE-2026-37428

    qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the Sys…