Skip to content
OpenAdvisories

Archive

14 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /14 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-12190

    Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme

    A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only…

    Genspark AI Workspace App
  • Medium 5.3
    CVE-2026-12189

    Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme

    A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be execute…

    Moovit Bus & Public Transit App
  • Medium 6.3
    CVE-2026-12188

    Grit42 Grit GritEntityController grit_entity_controller.rb sql injection

    A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules/core/backend/app/controllers/concerns/grit/core/grit_entity_controller.rb of the component GritEntityController. Performing a ma…

    Grit42 Grit
  • Medium 5.9
    CVE-2026-54411

    Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison

    Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authenticati…

    Linux-PAM Linux-PAM pam pam Linux Debian Ubuntu Azure Linux
  • Medium 5.4
    CVE-2025-15546

    Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition

    The Iptanus File Upload WordPress plugin before 5.1.7 does not implement proper file handling when the duplicatepolicy setting is configured to "maintain both." Due to a Time-of-Check to Time-of-Use (TOCTOU) race condition between the file existence check and…

    Web / CMS
  • Medium 6.8
    CVE-2026-54421

    OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

    In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome …

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI