Skip to content
OpenAdvisories

Archive

15 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /15 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-48017 Public exploit

    DbGate: Remote Code Execution via functionName injection in loadReader endpoint

    DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An …

    dbgate dbgate dbgate-api npm
  • High 7.5
    CVE-2026-49083 Public exploit

    WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability

    Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.

    latepoint LatePoint
  • High 7.1
    CVE-2026-40791 Public exploit

    WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.

    codepeople WP Time Slots Booking Form
  • High 7.5
    CVE-2026-40776 Public exploit

    WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions.

    Arraytics WP Event Solution
  • High 7.5
    CVE-2026-47777 Public exploit

    Mastodon has a consent-check bypass in its remote Collections

    Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection could lead to attackers bypassing the check and faking consent…

    mastodon mastodon
  • High 8.8
    CVE-2026-36670 Public exploit

    A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) p…

  • High 7.8
    CVE-2026-36213 Public exploit

    An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.…