High
CVE-2026-33901
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,125
Reset filters
High
CVE-2026-33908
ImageMagick has a Stack Overflow in DestroyXMLTree()
Medium
CVE-2026-33899
ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.
Medium
CVE-2026-34238
ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds
Medium
CVE-2026-33900
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
Medium
CVE-2026-40306
DNN: Same HostGUID for all new installs
Medium
CVE-2026-40305
DNN: Force Friend Request Acceptance
High
CVE-2026-40321
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
Medium
CVE-2026-40021
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
High
CVE-2026-39959
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
High
ghsa-32wq-ppwg-3w4m
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
High
ghsa-mvm6-f9r3-fgfx
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
Low
CVE-2026-56366
ImageMagick: META reader memory leak in the APP1JPEG input path
Low
CVE-2026-56375
ImageMagick has possible memory leak in ASHLAR coder when action fails
Medium
CVE-2026-33536
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Medium
CVE-2026-33535
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Medium
CVE-2026-74785
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Medium
CVE-2026-74786
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
High
CVE-2026-74787
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
High
CVE-2026-74788
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
High
CVE-2026-74789
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Critical
CVE-2026-74790
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
High
CVE-2026-74791
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
High
CVE-2026-74792
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.