Medium
CVE-2026-14306
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-57765
Shopping Cart & eCommerce Store <= 5.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57755
Mosaic Gallery – Advanced Gallery <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-57783
Speaker <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-57790
Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-57760
Sendcloud Shipping <= 1.0.31 - Missing Authorization
Medium
CVE-2026-57778
Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization
High
CVE-2026-57804
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Unrated
pysec-2026-611
Malicious code in uprobe (PyPI)
Medium
CVE-2026-54262
Wagtail: Pages translations can be created without page permissions when using simple_translation
Medium
CVE-2026-54260
Wagtail: Denial of service via unbounded filter specs in the image preview
Medium
CVE-2026-54261
Wagtail: Improper permission handling in image preview
Medium
CVE-2026-54259
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
High
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Medium
CVE-2026-62208
OpenClaw MCP SSE redirects could forward Authorization headers
Unrated
pysec-2026-610
Malicious code in ufish (PyPI)
High
CVE-2026-50143
Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token
Critical
CVE-2026-53943
Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
High
CVE-2026-53712
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
High
CVE-2026-49119
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
Unrated
pysec-2026-609
Malicious code in synago (PyPI)
Unrated
pysec-2026-608
Malicious code in pantheon-toolsets (PyPI)
Unrated
pysec-2026-607
Malicious code in pantheon-agents (PyPI)
High
CVE-2026-9795
Keycloak has privilege escalation via improper scope mapping enforcement
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.