Skip to content
OpenAdvisories

Archive

19 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /19 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.6
    CVE-2026-16218

    hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions

    A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling …

    hunvreus devpush
  • Low 3.3
    CVE-2026-16213

    Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

    A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entry_protection.py of the component Protected Entry Password Handler. The manipulation…

    Fantomas42 django-blog-zinnia
  • Low 2.6
    CVE-2026-16211

    allegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race condition

    A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impacts the function AssetLastHostname.increment_hostname of the file src/ralph/assets/models/assets.py of the component Hostname Allocation Handler. Executing a ma…

  • Low 3.7
    CVE-2026-16207

    django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings

    A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched …

  • Low 2.4
    CVE-2026-16205

    Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting

    A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead t…

    Pluck CMS
  • Low 3.5
    CVE-2026-16203

    SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulation of the argument course leads to cross site scripting. The attack may be per…

    SourceCodester Class and Exam Timetabling System
  • Low 3.5
    CVE-2026-16202

    SourceCodester Class and Exam Timetabling System CYS.php cross site scripting

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. This manipulation of the argument course causes cross site scripting. The attack is possib…

    SourceCodester Class and Exam Timetabling System