Skip to content
OpenAdvisories

Archive

19 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /19 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

94 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-8814

    ExifReader is vulnerable to denial of service via unbounded decompression of image metadata

    Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing…

    exifreader npm
  • Medium 5.5
    CVE-2026-47309

    Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This is…

    Samsung Open Source escargot
  • Medium 5.3
    CVE-2026-32994

    The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8…

    RocketChat Rocket.Chat
  • Medium 5.5
    CVE-2026-47308

    NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Wa…

    Samsung Open Source Walrus
  • Medium 6.5
    CVE-2026-28733

    filemanagement_storage_service has an use after free vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.

    OpenHarmony OpenHarmony
  • Medium 5.5
    CVE-2026-27766

    multimedia_audio_framework has a Race Condition vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.

    OpenHarmony OpenHarmony
  • Medium 5.5
    CVE-2026-25850

    filemanagement_storage_service has an improper preservation of permissions vulnerability

    in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak

    OpenHarmony OpenHarmony
  • Medium 5.5
    CVE-2026-47307

    NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service vi…

    Samsung Open Source Walrus
  • Medium 6.0
    CVE-2026-33514

    Discourse: Information Disclosure in Form Template API Due to Missing Authorization

    Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, an authenticated user on a Discourse instance with the form templates feature enabled can read the name and structured content of form te…

    Discourse Discourse
  • Medium 5.0
    CVE-2026-33234 Public exploit

    AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server

    AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions 0.1.0 through 0.6.51, SendEmailBlock in autogpt_platform/backend/backend/blocks/email_block.py accepts a user-supplied smtp_…

    Significant-Gravitas AutoGPT
  • Medium 5.3
    CVE-2026-33052

    MantisBT: Authorization Bypass in Global Profile Creation

    Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "add_profile_threshold" permission to create a global profile despite not having manage_global_profile_threshold, …

    mantisbt mantisbt mantisbt/mantisbt Packagist
  • Medium 5.3
    CVE-2026-32244

    Discourse: Cached outdated summaries can leak removed content

    Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, outdated cached AI summaries can leak removed content to anonymous and unprivileged users who cannot regenerate summaries. This issue has…

    Discourse Discourse
  • Medium 5.3
    CVE-2026-34883

    An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a…

  • Medium 5.4
    CVE-2026-36827

    A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web management interface in…