Skip to content
OpenAdvisories

Archive

1 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /1 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.1
    CVE-2026-24090 Public exploit

    Missing Authentication for Critical Function in HLOS

    Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

    Qualcomm Snapdragon
  • High 8.2
    CVE-2026-24088 Public exploit

    Missing Authentication for Critical Function in Boot

    Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

    Qualcomm Snapdragon
  • High 7.8
    CVE-2026-0091 Public exploit

    In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell …

    Google Android Android
  • High 7.8
    CVE-2026-0075 Public exploit

    In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead …

    Google Android Android
  • High 7.8
    CVE-2026-0009 Public exploit

    In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escala…

    Google Android Android
  • High 8.4
    CVE-2025-48595 Exploited Public exploit

    In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to…

    Google Android Android
    KEV Jun 2, 2026
  • High 7.3
    CVE-2026-10290 Public exploit

    code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

    A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql in…

    code-projects Hotel and Tourism Reservation System
  • High 7.3
    CVE-2026-10288 Public exploit

    code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

    A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper a…

    code-projects Hotel and Tourism Reservation System
  • High 7.5
    CVE-2024-52011 Public exploit

    launch-editor vulnerable to command injection via the crafted request on Windows

    launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a …

    vitejs vite launch-editor vite npm
  • High 8.1
    CVE-2026-45156 Public exploit

    Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC

    Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verification in User OIDC allowed a malicious ID4me authority to identify as any user. This …

    Nextcloud security-advisories
  • High 7.1
    CVE-2026-46243 Public exploit

    smb: client: reject userspace cifs.spnego descriptions

    In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as ke…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2026-10243 Public exploit

    code-projects Smart Parking System Admin Endpoint missing authentication

    A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit…

    code-projects Smart Parking System
  • High 8.1
    CVE-2026-44825 Public exploit Scanner template

    Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users

    Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access to the cluster via publicly known default credentials insta…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core Maven
  • High 8.1
    CVE-2026-42588 Public exploit

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

    Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console…

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Apache ActiveMQ Broker Debian Ubuntu Maven