Low
CVE-2026-55469
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filters
Medium
CVE-2026-55466
Snipe-IT vulnerable to stored XSS via inline-served attachment
Medium
CVE-2026-55464
Snipe-IT vulnerable to stored XSS via Markdown custom field
Medium
CVE-2026-55462
Snipe-IT has an authorization bypass on print inventory page
Medium
CVE-2026-55461
Snipe-IT has an Open Redirect After User Edit
High
CVE-2026-55460
Snipe-IT has an authorization bypass on bulk editing users
Medium
CVE-2026-55452
Snipe-IT has CSV formula injection in Activity Report export
High
CVE-2026-57584
Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS
High
CVE-2026-54736
Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)
High
CVE-2026-54718
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
Low
CVE-2026-54713
cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions
High
CVE-2026-54721
silverstripe/userforms vulnerable to remote code execution via userforms email subject
Medium
CVE-2026-54720
Silverstripe Framework: Possible XSS attack through media embed
Low
CVE-2026-44701
OpenSTAManager has HTML Injection in modules/utenti/edit.php
High
CVE-2026-84192
LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates
Unrated
CVE-2026-81160
drupal/slick - SA-CONTRIB-2026-117
Unrated
CVE-2026-81201
drupal/monster_menus - SA-CONTRIB-2026-116
Unrated
CVE-2026-81205
drupal/ldap_auth - SA-CONTRIB-2026-115
Unrated
CVE-2026-81164
drupal/entity_pdf - SA-CONTRIB-2026-114
Unrated
CVE-2026-81158
drupal/entity - SA-CONTRIB-2026-113
Unrated
CVE-2026-81162
drupal/dxpr_builder - SA-CONTRIB-2026-112
Unrated
CVE-2026-16647
drupal/disable_login - SA-CONTRIB-2026-111
Unrated
CVE-2026-81166
drupal/digital_signage_framework - SA-CONTRIB-2026-109
Unrated
CVE-2026-81269
drupal/datafield - SA-CONTRIB-2026-108
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.