Skip to content
OpenAdvisories

Archive

20 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /20 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

165 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-76956

    In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, …

    libexpat project libexpat insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  • Medium 6.3
    CVE-2026-76800

    DeDeCMS select_media_post.php unrestricted upload

    A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed r…

  • Medium 5.3
    CVE-2026-76799

    code-projects Login Registration System SQL Database Backup login_registration_system.sql file access

    A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/login_registration_system.sql of the component SQL Database Backup Handler. This manipulation causes files or dir…

    code-projects Login Registration System
  • Medium 5.7
    CVE-2026-75628

    Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter

    Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter. oauth2_login reads the return parameter from the initiation request, runs same_origi…

  • Medium 6.3
    CVE-2026-76785

    amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection

    A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy/orderFormat results…

    amirsanni Mini-Inventory-and-Sales-Management-System