High
CVE-2026-24416
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filters
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
Low
CVE-2026-22254
Winter CMS has Stored Cross-site Scripting (XSS) in Asset Manager
Medium
CVE-2026-25523
Magento's X-Original-Url header can expose admin url
Medium
CVE-2026-25483
Craft Commerce has Stored XSS via Order Status Message with potential database exfiltration
Critical
CVE-2026-25510
CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
Medium
CVE-2026-23476
FacturaScripts is Vulnerable to Reflected XSS
High
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
Unrated
CVE-2026-1554
drupal/cas_server - SA-CONTRIB-2026-007
Medium
CVE-2026-24421
phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)
High
CVE-2025-67847
Moodle affected by a code injection vulnerability
Low
CVE-2026-26188
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
Medium
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Critical
CVE-2026-23524
Laravel Redis Horizontal Scaling Insecure Deserialization
Medium
CVE-2026-23626
Kimai has an Authenticated Server-Side Template Injection (SSTI)
Medium
CVE-2025-69198
Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted
Low
ghsa-44jg-mv3h-wj6g
solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data
Low
ghsa-58q2-9x27-h2jm
solspace/craft-freeform Has a DoS Vulnerability
High
CVE-2026-23622
alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass
Medium
CVE-2026-23496
Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization
Medium
CVE-2026-23495
Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" Listing
Medium
CVE-2026-23494
Pimcore is Vulnerable to Broken Access Control: Missing Function Level Authorization on "Static Routes" Listing
High
CVE-2026-23493
Pimcore ENV Variables and Cookie Informations are exposed in http_error_log
High
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.