Medium
CVE-2026-44833
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-49316
Phpseclib needs guardrails on large binaryfield integers
Critical
CVE-2026-37709
Snipe-IT has insecure permissions in file uploads
High
CVE-2026-44832
Snipe-IT has Privilege Escalation via API Permissions Assignment
Medium
CVE-2026-44831
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
Medium
CVE-2026-44298
Kimai has an arbitrary file read in its invoice PDF renderer (admin)
High
CVE-2026-41486
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Medium
CVE-2026-44214
eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields
Medium
CVE-2026-44213
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
Critical
CVE-2026-44211
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability
High
CVE-2026-44728
@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
Medium
ghsa-qhh4-458h-xwh2
@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
Critical
CVE-2026-44551
Open WebUI has an LDAP Empty Password Authentication Bypass
Medium
CVE-2026-44737
Grav: Stored XSS via page title (data[header][title]) in admin panel
High
CVE-2026-44680
MikroORM has SQL injection via runtime-controlled identifiers and JSON-path keys
High
CVE-2026-6322
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
High
CVE-2026-44721
open-webui Vulnerable to Stored XSS via Model Description
Critical
CVE-2026-43944
Electerm users can run dangrous code through link or command line
High
CVE-2026-43943
Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor
Medium
CVE-2026-43942
Electerm's full process.env exposed to renderer via window.pre.env
High
CVE-2026-43941
Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click
Critical
CVE-2026-43940
Electerm runWidget has a path traversal that leads to arbitrary code execution
High
CVE-2024-27355
phpseclib guardrails needed on OID length
Low
CVE-2026-4671
justhtml introduces denial-of-service hardening
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.