Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.1 CVE-2026-57965

Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow_CVE-2026-57965

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. Th...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 4.3 CVE-2026-57676

WordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerability_CVE-2026-57676

Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar allows Exploiting Incorrectly Configured Access C...

Matteo Manna Simple User Avatar n/a CVE
HIGH 7.3 CVE-2026-22078

O+ Connect’s lack of authentication for IPC channels led to a local privilege escalation vulnerability._CVE-2026-22078

Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through...

OPPO O+ Connect 16.0.33 CVE
MEDIUM 6.8 CVE-2026-13595

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing_CVE-2026-13595

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition prober...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 6.9 CVE-2026-13551

itsourcecode Baptism Information Management System editBaptism.php sql injection_CVE-2026-13551

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file ...

itsourcecode Baptism Information Management System 1.0 CVE
MEDIUM 6.9 CVE-2026-13550

itsourcecode Baptism Information Management System delbaptism.php sql injection_CVE-2026-13550

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /...

itsourcecode Baptism Information Management System 1.0 CVE
MEDIUM 5.3 CVE-2026-13549

CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization_CVE-2026-13549

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file app...

CodeAstro Complaint Management System 1.0 CVE
MEDIUM 5.3 CVE-2026-13548

itsourcecode Hospital Management System doctortimings.php sql injection_CVE-2026-13548

A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The ...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 6.9 CVE-2026-13547

Hanwang e-Face General Management Platform upload.do unrestricted upload_CVE-2026-13547

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manag...

Hanwang e-Face General Management Platform 6.3.5.4 CVE
MEDIUM 6.9 CVE-2026-13546

Feehi CMS REST API Endpoint articles missing authentication_CVE-2026-13546

A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API End...

Feehi CMS 2.1.0 CVE