Skip to content
OpenAdvisories

Archive

18 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /18 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-53959 Public exploit

    4gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users to any authenticated user

    4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for every user through GET /api/users and retrieve arbitrary accounts through GET /api/users/:id. The users/…

    RARgames 4gaBoards
  • Medium 5.4
    CVE-2026-18504 Public exploit

    fastify vulnerable to schema validation bypass via root primitive coercion mismatch

    fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an in…

    fastify fastify fastify npm
  • Medium 5.5
    CVE-2026-47630 Public exploit

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traver…

    NVIDIA Triton Inference Server
  • Medium 6.3
    CVE-2026-63642 Public exploit

    MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

    MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, checkArticleUrl in defaultmodules/newsfeed/node_helper.js accepts the CHECK_ARTICLE_URL notification through the unauthenticated Socket.IO namespace /newsfeed and performs fetch(ur…

    MagicMirrorOrg MagicMirror magicmirror npm
  • Medium 5.4
    CVE-2026-74970 Public exploit

    Site isolation issue in the Graphics component

    Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu
  • Medium 6.5
    CVE-2026-74945 Public exploit

    Information disclosure in the Graphics: Text component

    Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Medium 5.3
    CVE-2021-43718 Public exploit

    An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malic…