Skip to content
OpenAdvisories

Archive

8 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /8 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

286 results · Feed

  • Medium 6.3
    CVE-2026-11473

    jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

    A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was …

    jflyfox jfinal_cms
  • High 7.3
    CVE-2026-11472

    SourceCodester Class and Exam Timetabling System index1.php sql injection

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /index1.php. This manipulation of the argument Password causes sql injection. The attack can be initiated remotely. The exploi…

    SourceCodester Class and Exam Timetabling System
  • High 7.3
    CVE-2026-11471

    SourceCodester Class and Exam Timetabling System index2.php sql injection

    A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack rem…

    SourceCodester Class and Exam Timetabling System
  • Medium 6.3
    CVE-2026-11470

    hs-web hsweb-framework File Upload FileUploadProperties.java denied path traversal

    A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the file hsweb-system/hsweb-system-file/src/main/java/org/hswebframework/web/file/FileUploadProperties.java of the component File Upload. The …

    hs-web hsweb-framework org.hswebframework.web:hsweb-system-file Maven
  • High 7.5
    CVE-2026-36786

    Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 paramet…

  • High 7.5
    CVE-2026-36789

    Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the …