Skip to content
OpenAdvisories

Archive

22 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /22 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

172 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-93709

    Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler

    Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows ca…

    libdancer2-perl libdancer2-perl Debian Ubuntu
  • Medium 6.3
    CVE-2026-94492

    Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection

    A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attac…

    Yonyou U8cloud
  • Medium 5.3
    CVE-2026-76974

    Information Disclosure vulnerability in SAP Fiori Launchpad

    SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker-controlled content from an external loc…

    SAP SAP Fiori Launchpad
  • Medium 5.1
    CVE-2026-75432

    An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::P…

    yaml-cpp yaml-cpp Debian Ubuntu
  • Medium 4.7
    CVE-2026-79315

    A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface reflects the raw request …

  • Medium 6.1
    CVE-2026-79311

    webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__().

    webpy webpy Debian Ubuntu
  • Medium 6.8
    CVE-2026-79312

    webpy web.py 0.76 is vulnerable to Session Fixation. The component Session._load() reads session_id directly from the r…

    webpy webpy Debian Ubuntu
  • Medium 5.5
    CVE-2026-88339

    A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV). …

    gpac Ubuntu
  • Medium 6.2
    CVE-2026-88350

    An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().

    mpack Ubuntu
  • Medium 5.5
    CVE-2026-88341

    A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can…

    yara yara Debian Ubuntu
  • Medium 6.5
    CVE-2026-37603

    Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 So…

  • Medium 6.5
    CVE-2026-37604

    pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _protected/framework/Ip…