Skip to content
OpenAdvisories

Archive

12 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /12 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-15505

    vnotex vnote YAML Frontmatter markdownit.js cross site scripting

    A weakness has been identified in vnotex vnote up to 3.20.1. Impacted is an unknown function of the file /src/data/extra/web/js/markdownit.js of the component YAML Frontmatter. This manipulation of the argument p_metaData causes cross site scripting. The atta…

    vnotex vnote
  • Low 2.4
    CVE-2026-10668

    Host-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driver

    The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numaker_hsusbd_ep_trigger). Because the HSUSBD hardware cannot disarm a control Data IN already ar…

    zephyrproject zephyr
  • Low 3.1
    CVE-2026-61874

    filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete

    filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in DeleteWithPathPrefix, allowing authenticated users to leave stale public shares behind. Attackers can delete a shared directory using a trailing-slash path, then re…

    filebrowser filebrowser github.com/filebrowser/filebrowser/v2 Go
  • Low 3.8
    CVE-2026-56281

    Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint

    Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body and interpolated directly into Cloudflare Analytics Engine SQL queries via template …

    Capgo Capgo
  • Low 3.5
    CVE-2026-15493

    Akpali9 Attendance-Management-System absent.php cross site scripting

    A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0edcd4f42d5f64aeee. This issue affects some unknown processing of the file absent.php. Performing a manipulation of the argument export_date results in cross site…

    Akpali9 Attendance-Management-System