Skip to content
OpenAdvisories

Archive

2 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /2 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

166 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-84925

    Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' Parameter

    The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This …

    ThemeFusion Avada | Website Builder For WordPress & WooCommerce Web / CMS
  • Medium 6.3
    CVE-2026-104054

    calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

    A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization.…

    Cal.com cal.diy
  • Medium 6.3
    CVE-2026-104053

    itsourcecode Pet Shop Management System admin_reservefilter.php sql injection

    A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attac…

    itsourcecode Pet Shop Management System
  • Medium 6.9
    CVE-2026-21140

    Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitr…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.3
    CVE-2026-104052

    itsourcecode Pet Shop Management System admin_reject_completed.php sql injection

    A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack…

    itsourcecode Pet Shop Management System
  • Medium 4.3
    CVE-2026-51899

    In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api…