Skip to content
OpenAdvisories

Archive

29 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /29 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

124 results · Clear filters · Feed

  • Medium 5.6
    CVE-2026-13524

    CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization

    A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the component MCP OAuth Local Callback Server. The manipulation of the argument co…

    CherryHQ cherry-studio
  • Medium 4.3
    CVE-2026-13522

    Investintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds

    A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this issue is the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of the file SlimPDFReader.exe of the component PDF File Handler. Performing a manipulatio…

    Investintech SlimPDFReader
  • Medium 6.3
    CVE-2026-13520

    itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Handler. This manipulation of the argument editid causes sql injection. The attack…

    itsourcecode Hospital Management System
  • Medium 6.5
    CVE-2026-31016

    Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to esca…