Medium
CVE-2026-27799
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-27798
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
Low
CVE-2026-56362
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
Medium
CVE-2026-56368
ImageMagick: Memory Leak in multiple coders that write raw pixel data
Low
CVE-2026-56371
ImageMagick: Memory leak in coders/txt.c without freetype
Low
CVE-2026-56379
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c
Low
CVE-2026-56378
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
Low
CVE-2026-56373
mageMagick has a possible use-after-free write in its PDB decoder
Low
CVE-2026-56376
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
Low
CVE-2026-56383
Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type
Critical
CVE-2026-27641
Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
High
CVE-2026-27610
Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions
High
CVE-2026-27609
Parse Dashboard is Missing CSRF Protection for its Agent Endpoint
Critical
CVE-2026-27608
Parse Dashboard is Missing Authorization for its Agent Endpoint
Critical
CVE-2026-27702
Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)
High
CVE-2026-27732
AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php
Unrated
CVE-2026-3218
drupal/responsive_favicons - SA-CONTRIB-2026-019
Unrated
CVE-2026-3217
drupal/miniorange_saml - SA-CONTRIB-2026-018
Unrated
CVE-2026-3216
drupal/canvas - SA-CONTRIB-2026-017
Unrated
CVE-2026-3215
drupal/islandora - SA-CONTRIB-2026-016
Unrated
CVE-2026-3214
drupal/captcha - SA-CONTRIB-2026-015
Unrated
CVE-2026-3213
drupal/cleantalk - SA-CONTRIB-2026-014
Unrated
CVE-2026-3212
drupal/tagify - SA-CONTRIB-2026-013
Unrated
CVE-2026-3211
drupal/theme_rule - SA-CONTRIB-2026-012
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.