Skip to content
OpenAdvisories

Archive

18 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /18 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-112031

    Chamilo LMS Ticket TicketManager.php addProject cross site scripting

    A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lea…

    chamilo LMS
  • Low 2.3
    CVE-2026-112112

    An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject …

    NIC BIRD bird2 bird3 Debian Ubuntu
  • Low 2.5
    CVE-2026-112029

    diem-project diem SHA1 PluginDmUser.class.php weak password hash

    A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insu…

    diem-project diem
  • Low 3.7
    CVE-2026-112026

    light0011 cms UserModel.class.php sha1 weak password hash

    A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Passw…

    light0011 cms
  • Low 3.1
    CVE-2026-97204

    Gitea label deletion across repository and organization IDs

    Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap. A user with write access to the issues of a repository could therefore delete the labels of an organization…

    Gitea Gitea
  • Low 3.3
    CVE-2026-111993

    Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage

    A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensit…

    Soarkey StudentManagement
  • Low 3.1
    CVE-2026-112050

    Gitify before 7.10.0 Login CSRF via Missing OAuth State Validation

    Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link …

    gitify-app gitify
  • Low 3.1
    CVE-2026-112004

    Teable before 2026-10-12T12-45-53Z.3331 Authorization Bypass via Folder Rename Endpoint

    Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|upd…

    teableio teable
  • Low 3.7
    CVE-2026-111874

    OpenCATS Career Portal CareersUI.php processLogin excessive authentication

    A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentica…