Skip to content
OpenAdvisories

Archive

18 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /18 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

50 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8781

    omec-project amf handler.go RANConfiguration null pointer dereference

    A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit …

    omec-project amf github.com/omec-project/amf Go
  • Medium 4.3
    CVE-2026-8780

    omec-project amf NGAP Message dispatcher.go memory corruption

    A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption. The attack may be initiated remo…

    omec-project amf github.com/omec-project/amf Go
  • Medium 4.3
    CVE-2026-8779

    omec-project amf handler.go NGSetupRequest memory corruption

    A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remo…

    omec-project amf github.com/omec-project/amf Go
  • Medium 6.3
    CVE-2026-8777

    Edimax BR-6428NS POST Request formStaDrvSetup command injection

    A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulation of the argument stadrv_ssid results in command injection. …

    Edimax BR-6428NS
  • Medium 6.3
    CVE-2026-8774

    Edimax BR-6228NC POST Request mp command injection

    A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation of the argument command results in command injection. The attack may be performed f…

    Edimax BR-6228NC
  • Medium 4.7
    CVE-2026-8773

    linlinjava litemall Database Setting DbUtil.java load argument injection

    A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the function backup/load of the file litemall-db/src/main/java/org/linlinjava/litemall/db/util/DbUtil.java of the component Database Setting Handl…

    linlinjava litemall
  • Medium 6.2
    CVE-2026-38719

    OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifi…

  • Medium 6.1
    CVE-2026-29964

    HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to impr…

  • Medium 6.1
    CVE-2026-29965

    HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to…

  • Medium 5.3
    CVE-2026-36438 Public exploit

    An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information…