Medium
CVE-2026-33682
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2026-33430
Briefcase: Windows MSI Installer Privilege Escalation via Insecure Directory Permissions
High
CVE-2025-70887
An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py components
High
CVE-2026-27602
Modoboa has OS Command Injection
Medium
CVE-2026-25645
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Critical
ghsa-5mg7-485q-xm76
Two LiteLLM versions published containing credential harvesting malware
Medium
CVE-2026-33332
NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion
Medium
CVE-2026-33314
Improper Authentication and Origin Validation Error in pyload-ng
High
CVE-2026-5389
JustHTML is vulnerable to XSS via code fence breakout in <pre> content
Unrated
pysec-2026-2
Two litellm versions published containing credential harvesting malware
High
CVE-2026-33310
Intake has a Command Injection via shell() Expansion in Parameter Defaults
High
CVE-2026-33497
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
High
CVE-2026-33484
langflow has Unauthenticated IDOR on Image Downloads
Critical
CVE-2026-33309
Langflow has an Arbitrary File Write (RCE) via v2 API
High
CVE-2026-33046
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
High
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
High
CVE-2026-4538
A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be pe
Medium
CVE-2019-25585
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffe
Medium
CVE-2019-25586
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of
High
CVE-2026-33236
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
High
CVE-2026-33231
Unauthenticated remote shutdown in nltk.app.wordnet_app
Medium
CVE-2026-33230
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
High
CVE-2026-33154
dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver
High
CVE-2026-33053
Langflow is Missing Ownership Verification in API Key Deletion (IDOR)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.