Critical
CVE-2026-79657
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 230
Reset filters
High
CVE-2026-78681
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
Medium
CVE-2026-102734
asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
High
CVE-2026-71308
Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates
High
CVE-2026-54284
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
Critical
CVE-2026-55209
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read
Medium
CVE-2026-73559
vLLM: Completion prompt lists fan out into unbounded engine requests
High
CVE-2026-54656
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
Medium
CVE-2026-59218
Open WebUI: Account enumeration via observable login timing discrepancy
Medium
CVE-2026-59198
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
High
CVE-2026-59199
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
High
CVE-2026-54071
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
Medium
CVE-2026-44512
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)
High
CVE-2026-26193
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
High
CVE-2026-26192
Open WebUI vulnerable to Stored XSS via iFrame in citations model
High
CVE-2026-55426
Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command
High
CVE-2022-46292
Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)
High
CVE-2022-46294
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
High
CVE-2022-46291
Open Babel has out-of-bounds write in Gaussian translationVectors[]
Critical
CVE-2026-50027
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
High
CVE-2022-46293
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
High
CVE-2022-46295
Open Babel has out-of-bounds write in MSI translationVectors[]
High
CVE-2026-53925
Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration
High
CVE-2026-46608
Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.