Skip to content
OpenAdvisories

Archive

24 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /24 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-48832

    action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.

    SPIP SPIP spip spip Debian Ubuntu
  • Low 3.1
    CVE-2026-9398

    Besen BS20 EV Charging Station BLE/WiFi authentication replay

    A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass by capture-replay. The attack must be carried out from within…

    Besen BS20 EV Charging Station
  • Low 3.7
    CVE-2026-9396

    Besen BS20 EV Charging Station Firmware Version Check ui layer

    A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. T…

    Besen BS20 EV Charging Station
  • Low 3.5
    CVE-2026-9395

    Besen BS20 EV Charging Station BLE/UDP insufficiently protected credentials

    A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently protected credentials. The attack needs to be initiated within the local networ…

    Besen BS20 EV Charging Station
  • Low 3.1
    CVE-2026-9394

    Besen BS20 EV Charging Station Bluetooth Low Energy weak password

    A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipulation can lead to weak password requirements. The attack needs to be done withi…

    Besen BS20 EV Charging Station
  • Low 2.4
    CVE-2026-9377

    SourceCodester SUP Online Shopping productedit.php cross site scripting

    A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName leads to cross site scripting. It is possible to initiate th…

    SourceCodester SUP Online Shopping
  • Low 3.7
    CVE-2026-9373

    JeecgBoot OpenAPI Endpoint call improper authentication

    A vulnerability has been found in JeecgBoot 3.9.1. This issue affects some unknown processing of the file /openapi/call/ of the component OpenAPI Endpoint. Such manipulation leads to improper authentication. The attack can be executed remotely. A high complex…

  • Low 3.7
    CVE-2026-9370

    ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt

    A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMC…

    ulisesbocchio jasypt-spring-boot com.github.ulisesbocchio:jasypt-spring-boot-starter com.github.ulisesbocchio:jasypt-spring-boot Maven
  • Low 3.5
    CVE-2026-9357

    vBulletin Login cross site scripting

    A vulnerability was found in vBulletin 6.x. This impacts an unknown function of the component Login. Performing a manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.…