Skip to content
OpenAdvisories

Archive

1 June 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10289 Public exploit

    code-projects Hotel and Tourism Reservation System tour.php cross site scripting

    A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The…

  • Medium 4.3
    CVE-2026-45729 Public exploit

    ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input

    Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. …

  • Medium 6.5
    CVE-2026-48208 Public exploit

    Denial-of-Service via SVG Rendering in Ticket

    An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when…