Skip to content
OpenAdvisories

Archive

30 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /30 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-54900 Public exploit

    Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling

    Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in usual mode with create_id enabled, Oj::Parser#parse is vulnerable to heap corruption via a negative-size memcpy. When a JSON object key is …

    ohler55 oj ruby3.4-kube-logging-operator-fluentd-outputs ruby3.2-kube-logging-operator-fluentd-outputs Debian Ubuntu Wolfi RubyGems
  • Critical 9.6
    CVE-2026-13934 Public exploit

    Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote …

    Google Chrome chromium chromium Browsers Debian Wolfi
  • Critical 10.0
    CVE-2026-10134 Public exploit

    Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows

    IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and saved component in the Langflow database, can connect to internal services, abu…

    IBM Langflow OSS
  • Critical 9.9
    CVE-2026-7873 Public exploit Scanner template

    Code Injection Vulnerability in Code Validation Endpoint

    IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

    IBM Langflow OSS langflow PyPI
  • Critical 9.8
    CVE-2026-58138 Public exploit Scanner template

    Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

    Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions…

    conductor-oss conductor
  • Critical 10.0
    CVE-2026-48282 Exploited Public exploit Scanner template EPSS 42%

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of thi…

    Adobe ColdFusion 2023 ColdFusion 2025
    KEV Jul 7, 2026
  • Medium 6.9
    CVE-2026-10817 Public exploit

    Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

    NetScaler ADC Gateway
  • High 8.8
    CVE-2026-8452 Exploited Public exploit

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

    NetScaler ADC Gateway
    KEV Aug 26, 2026
  • High 8.8
    CVE-2026-8451 Public exploit EPSS 14%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

    NetScaler ADC Gateway