Skip to content
OpenAdvisories

Archive

25 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /25 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-77680 Public exploit

    Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

    An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7…

    Red Hat Red Hat Enterprise Linux 10 libsoup3 libsoup3 Linux Debian Ubuntu
  • Medium 5.5
    CVE-2026-64705 Public exploit

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS S…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 4.8
    CVE-2026-26211 Public exploit

    Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field

    Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, a…

    Creativeitem Ekushey Project Manager CRM
  • Medium 6.3
    CVE-2026-56096 Public exploit

    Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

    The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A remote, unauthenticated attacker can use this syntax to enumerate indexed field…

    TYPO3 Extension "Apache Solr for TYPO3 - Enterprise Search" Web / CMS
  • Medium 6.1
    CVE-2026-17089 Public exploit

    Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter

    The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'header_format' parameter in all versions up to, and including, 7.4.0.1 due to insufficient input sanitization and output …

    netweblogic Events Manager – Calendar, Bookings, Tickets, and more! Web / CMS
  • Medium 4.0
    CVE-2026-39113 Public exploit

    Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3…

    sqlite3 sqlite3 sqlite Debian Ubuntu