High
CVE-2026-49291
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
Low
CVE-2025-10995
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Low
CVE-2026-2704
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Medium
CVE-2025-10999
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
Low
CVE-2026-2705
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
High
CVE-2025-10997
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
High
CVE-2025-10996
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
High
CVE-2026-48804
python-socketio: Binary attachment accumulation can cause denial of service
High
CVE-2026-48809
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
Medium
CVE-2026-55163
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
Medium
CVE-2026-55165
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
High
CVE-2026-48508
Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission
Medium
CVE-2026-55162
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
Medium
CVE-2026-55164
Lemur user-update path stores plaintext passwords
Medium
CVE-2026-48990
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
High
CVE-2026-48813
Flawfinder output manipulation via untrusted filenames and source text
Medium
CVE-2026-55863
motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution
High
CVE-2026-55488
motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
High
CVE-2026-53925
Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration
High
CVE-2026-54134
OctoPrint has possible file exfiltration via query parameters on upload endpoints
Medium
CVE-2026-48487
zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Medium
CVE-2026-48775
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
High
CVE-2026-9291
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()
Medium
CVE-2026-31978
motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.