Skip to content
OpenAdvisories

Archive

19 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /19 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-8492

    Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

    Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

    Drupal Translate Drupal with GTranslate drupal/gtranslate Web / CMS Packagist
  • Low 3.7
    CVE-2026-8491

    Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034

    Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.

    Drupal Node View Permissions drupal/node_view_permissions Packagist
  • Low 2.1
    CVE-2026-34154

    Discourse has a subscription access bypass in its discourse-subscriptions plugin

    Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin allows users to gain access to subscription-gated groups without completing payment…

    Discourse Discourse
  • Low 1.8
    CVE-2025-14575

    Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

    An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the app…

    Qt Project Qt qtbase-opensource-src qt6-base Ubuntu
  • Low 1.6
    CVE-2026-7860

    Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build

    A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build env…

    vaadin flow com.vaadin:flow-plugins com.vaadin:flow-gradle-plugin Maven
  • Low 3.3
    CVE-2026-33565

    kernel_linux_common_modules has a Race Condition vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

    OpenHarmony OpenHarmony
  • Low 3.3
    CVE-2026-28751

    filemanagement_storage_service has an improper input validation vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

    OpenHarmony OpenHarmony
  • Low 3.3
    CVE-2026-27781

    kernel_liteos_a has an integer overflow vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

    OpenHarmony OpenHarmony
  • Low 3.3
    CVE-2026-25110

    Sensors_medical_sensor has a NULL pointer dereference vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

    OpenHarmony OpenHarmony