Skip to content
OpenAdvisories

Archive

3 June 2026

Vulnerabilities first published on this day (UTC), newest first.

45 results · Clear filters · Feed

  • Medium 4.1

    Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via …

  • Medium 6.5

    libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory a…

  • Medium 5.4

    Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file…

  • Medium 5.3

    A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reach…

  • Medium 6.5

    Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configur…