High
CVE-2022-37331
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
High
CVE-2022-41793
Open Babel has out-of-bounds write in CSR PadString (title field)
Low
CVE-2026-3408
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Low
CVE-2025-10994
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Medium
CVE-2025-11000
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Low
CVE-2025-10998
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
High
CVE-2026-49291
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Low
CVE-2025-10995
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Low
CVE-2026-2704
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Medium
CVE-2025-10999
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
Low
CVE-2026-2705
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
High
CVE-2025-10997
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
High
CVE-2025-10996
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
High
CVE-2026-48804
python-socketio: Binary attachment accumulation can cause denial of service
High
CVE-2026-48809
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
High
CVE-2026-48802
python-engineio has unbound thread allocation that can cause denial of service
Medium
CVE-2026-55163
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
Medium
CVE-2026-55165
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
High
CVE-2026-48508
Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission
Medium
CVE-2026-55162
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
Medium
CVE-2026-55164
Lemur user-update path stores plaintext passwords
Medium
CVE-2026-48990
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
High
CVE-2026-48813
Flawfinder output manipulation via untrusted filenames and source text
Medium
CVE-2026-35163
OctoPrint has XSS in its Suppressed Command Notifications
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.