Critical
CVE-2026-24013
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2022-37189
MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)
Medium
CVE-2022-2806
sosreport Exposure of Sensitive Information vulnerability
Medium
CVE-2022-1930
Regular expression denial of service in eth-account
High
CVE-2022-23451
Barbican authorization flaw before v14.0.0
Medium
CVE-2022-23452
openstack-barbican Denial of Service vulnerability
High
CVE-2022-38362
Remote code execution in Apache Airflow Docker's Provider
High
CVE-2022-31116
Incorrect handling of invalid surrogate pair characters
High
CVE-2022-35920
sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs
Medium
CVE-2018-25045
Django REST framework XSS Vulnerability
Medium
CVE-2022-31153
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
Low
CVE-2022-2822
OctoPrint does not have rate limiting on the login page
Low
CVE-2022-37394
OpenStack Nova Changing vnic_type breaks compute service restart
High
CVE-2022-2111
Unrestricted Attachment Upload
High
CVE-2022-2112
CSV Injection in inventree
Medium
CVE-2022-31117
Potential double free of buffer during string decoding
Medium
CVE-2022-29773
Access control issue in AlekSIS-Core
Medium
CVE-2022-33146
Open redirect in web2py
Medium
CVE-2019-11340
Matrix Sydent mishandles emails
High
CVE-2019-13594
Mirumee Saleor CSRF Protection Disabled
High
CVE-2020-35459
ClusterLabs crmsh vulnerable to shell code injection
Medium
CVE-2020-15703
aptdaemon Information Disclosure via Improper Input Validation in Transaction class
High
CVE-2021-38155
OpenStack Keystone allows information disclosure during account locking
High
CVE-2019-14322
Pallets Werkzeug vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.