Skip to content
OpenAdvisories

Archive

24 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /24 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-114820 Public exploit

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

    Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Alpine
  • High 7.5
    CVE-2026-116011 Public exploit

    Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()

    Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested JSON. Attackers can send a request body with thousands of nested objects to exha…

    CrowCpp Crow
  • Low 3.6
    CVE-2026-116012 Public exploit

    Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser

    Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, such as a malicious .sl…

    National Security Agency ghidra
  • Critical 9.3
    CVE-2026-112866 Public exploit Scanner template

    WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.

    WPFactory Product Filter by WBW
  • High 7.1
    CVE-2026-112869 Public exploit

    WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6.

    Noah Hearle We’re Open!