Skip to content
OpenAdvisories

Archive

16 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /16 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • High 7.8
    CVE-2020-37229

    OKI sPSV Port Manager 1.0.41 Unquoted Service Path Privilege Escalation

    OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a d…

    OKI OKI sPSV Port Manager
  • Critical 9.8
    CVE-2020-37228

    iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

    iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retrieve valid CAPTCHA codes via the login endpoint and use them…

    Yerootech iDS6 DSSPro Digital Signage System
  • High 8.8
    CVE-2020-37227

    WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload

    HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can intercept upload requests to the logoupload parameter in th…

    Heliossolutions HS Brand Logo Slider Web / CMS
  • Medium 6.5
    CVE-2026-46719

    Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

    Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

    RRWO Net::Statsd::Lite
  • Medium 4.3
    CVE-2025-4202

    Multicollab: Content Team Collaboration and Editorial Workflow <= 5.2 - Missing Authorization to Authenticated (Subscriber+) Collaboration Comment

    The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf_add_comment' function in all versions up to, and including, 5.2. This makes…

    multicollab Multicollab: Content Team Collaboration and Editorial Workflow Web / CMS
  • High 8.2
    CVE-2026-8657

    jsondiffpatch patch APIs are vulnerable to prototype pollution

    Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs. An attacker can perform prototype pollution by supplying crafted delta or JSON Patch do…

    jitsucom-jitsu-console jsondiffpatch Wolfi npm
  • Medium 6.1
    CVE-2026-8656

    Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated forma…

  • Medium 5.3
    CVE-2026-8681

    Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter

    The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unau…

    Essential Plugin Essential Chat Support Web / CMS