Medium
CVE-2026-24739
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filters
High
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
High
CVE-2020-36947
LibreNMS contains an authenticated SQL Injection vulnerability
Medium
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Medium
CVE-2026-0895
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Medium
CVE-2026-23626
Kimai has an Authenticated Server-Side Template Injection (SSTI)
High
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Medium
CVE-2022-50807
Concrete5 CMS contains an XPath injection vulnerability
Medium
CVE-2026-22242
CoreShop Vulnerable to SQL Injection via Admin Reports
High
CVE-2026-21857
Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
High
CVE-2025-68455
Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior
Medium
CVE-2025-68614
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
High
CVE-2025-65346
alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality
Unrated
CVE-2025-13979
drupal/minisite - SA-CONTRIB-2025-117
High
CVE-2025-66305
Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter
Medium
CVE-2025-66306
Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel
Medium
CVE-2025-66302
Grav vulnerable to Path Traversal allowing server files backup
Medium
CVE-2025-65093
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
High
CVE-2025-62519
phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
Medium
CVE-2025-64714
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
High
CVE-2025-64519
TorrentPier is Vulnerable to Authenticated SQL Injection through Moderator Control Panel's topic_id parameter
Low
CVE-2025-10931
drupal/umami_analytics - SA-CONTRIB-2025-109
Medium
CVE-2025-10927
drupal/plausible_tracking - SA-CONTRIB-2025-107
High
CVE-2025-62617
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.