High
CVE-2026-28518
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Low
CVE-2026-29790
dbt-common's commonprefix() doesn't protect against path traversal
High
CVE-2026-27905
BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Medium
CVE-2026-27835
wger: IDOR in RepetitionsConfig and MaxRepetitionsConfig API leak other users' workout data
Low
CVE-2026-27838
wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data
Medium
CVE-2026-27839
wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup
Medium
CVE-2026-27695
zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service
High
CVE-2026-27622
OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write
Medium
CVE-2026-27735
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
Medium
CVE-2026-27794
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
High
CVE-2026-27932
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Medium
CVE-2026-25138
Rucio WebUI has Username Enumeration via Login Error Message
Medium
CVE-2026-25734
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Medium
CVE-2026-25736
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Medium
CVE-2026-27469
Isso affected by Stored XSS via comment website field
High
CVE-2026-25733
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
High
CVE-2026-25136
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Medium
CVE-2026-25735
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
High
CVE-2024-56373
Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table
Medium
CVE-2025-65995
Apache Airflow error reporting may expose full kwargs
Medium
CVE-2025-27555
Apache Airflow exposes sensitive information in its log files
High
CVE-2026-26331
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
High
CVE-2026-2472
Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
High
CVE-2026-2473
Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.