Medium
CVE-2026-1573
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2026-1643
MP-Ukagaka <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-1613
Wonka Slide <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2026-25762
AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection
Critical
ghsa-4f84-67cv-qrv3
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
High
CVE-2026-25754
AdonisJS multipart body parsing has Prototype Pollution issue
High
CVE-2026-25725
Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json
Low
CVE-2026-25724
Claude Code has Permission Deny Bypass Through Symbolic Links
High
CVE-2026-25723
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
High
CVE-2026-25722
Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection
Medium
CVE-2026-25651
client-certificate-auth Vulnerable to Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect
High
CVE-2026-25640
Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
Critical
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
Medium
CVE-2026-25581
SCEditor has DOM XSS via emoticon URL/HTML injection
High
CVE-2026-25580
Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling
High
CVE-2026-24419
OpenSTAManager has a SQL Injection in the Prima Nota module
High
CVE-2026-24418
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
High
CVE-2026-24417
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service
High
CVE-2026-24416
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
High
CVE-2025-69216
OpenSTAManager has a SQL Injection in Scadenzario Print Template
High
CVE-2025-69214
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
Medium
CVE-2025-12159
Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-13463
Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.