Skip to content
OpenAdvisories

Archive

24 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /24 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low —
    GHSA-2625-rw7m-5q5x

    Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics

    ## Summary `hubuum_client` diagnostics can expose sensitive request, response, import/export, task, delivery, or server-provided data when applications format or log errors and public models. ## Affected behavior Native `reqwest::Error` values retain the full…

    hubuum_client crates.io
  • Low 3.3
    GHSA-464c-974j-9xm6

    AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

    ## Summary The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting `encrypted: true` …

    aws-cdk-lib software.amazon.awscdk:codebuild aws-cdk-lib Amazon.CDK.Lib npm Maven PyPI Go NuGet
  • Low 3.1
    CVE-2026-17039

    Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path

    A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Low 3.8
    CVE-2026-55728

    Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict

    Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-root process abort or…

    Loytec L-ROC L-DALI L-PAD
  • Low 1.8
    CVE-2026-56392

    Heap-based Buffer Overflow in GNU coreutils

    GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an unde…

    GNU coreutils coreutils Debian
  • Low 3.8
    CVE-2026-12690

    ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization

    The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management actions, relying only on a nonce that is exposed to any logged-in user, allowing authenticated users with Subscriber-level access and above to overwr…

    Web / CMS