High
CVE-2026-69219
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filters
High
CVE-2026-69220
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
High
CVE-2026-53752
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
Medium
CVE-2026-56818
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
Medium
CVE-2026-53573
core-geonetwork has an Open Redirect Bypass
High
CVE-2026-50559
Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
Medium
CVE-2026-54081
veraPDF Parser DoS via PostScript Type 1 Font Programs
Medium
CVE-2026-54080
veraPDF Parser DoS via PostScript CMap Streams
High
CVE-2026-54078
veraPDF Validation XXE via Rich Text
High
CVE-2026-54079
veraPDF Validation XXE via XFA
High
CVE-2026-43910
java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
Critical
CVE-2026-73644
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
Critical
ghsa-68r5-9hpg-7qw9
OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
Medium
CVE-2026-8384
Eclipse Jetty: Path parameter traversal
Medium
CVE-2026-6790
Eclipse Jetty: HTTP Authority/Host mismatch
Medium
CVE-2026-10051
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
Medium
CVE-2026-59921
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
Medium
CVE-2026-59920
Netty: STOMP CONNECT Frame Header Injection in Netty
Medium
CVE-2026-59919
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
High
CVE-2026-56822
Netty: TOCTOU in OcspServerCertificateValidator
High
CVE-2026-56821
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
High
CVE-2026-56820
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
High
CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
High
CVE-2026-54076
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.