High
CVE-2026-46359
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 56
Reset filters
Medium
CVE-2026-42610
Grav Vulnerable to Sensitive Information Disclosure via Accounts Service Bypass
Medium
CVE-2026-42207
Magento LTS Vulnerable to Open Redirect via Unvalidated `uenc` Parameter in `stockAction()`
Medium
CVE-2026-42206
OpenID Connect nonce generated but never validated — ID token replay attack
Medium
CVE-2026-41232
Froxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index Allows Cross-Customer Email Spoofing
High
CVE-2026-41056
WWBN AVideo has CORS Origin Reflection with Credentials on Sensitive API Endpoints Enables Cross-Origin Account Takeover
Medium
CVE-2026-40935
CAPTCHA Bypass in WWBN/AVideo via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
Low
CVE-2026-40194
phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()
High
CVE-2026-39976
Laravel Passport: TokenGuard Authenticates Unrelated User for Client Credentials Tokens
Medium
CVE-2026-34362
AVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()
High
CVE-2021-47763
Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter
High
CVE-2025-66468
Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors
Medium
CVE-2024-47173
ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups
Medium
CVE-2024-39319
IDOR vulnerability in account profile page
Medium
CVE-2024-43407
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Unrated
CVE-2024-13266
drupal/responsive_menu - SA-CONTRIB-2024-030
Medium
CVE-2024-47069
Reflected Cross Site-Scripting (XSS) in Oveleon Cookiebar
Medium
CVE-2024-39325
ai-controller-frontend payment status in basket isn't reset
Medium
CVE-2024-39322
aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
Low
CVE-2024-39324
aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services
High
CVE-2024-39323
aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account
High
CVE-2024-38516
Aimeos HTML client may potentially reveal sensitive information in error log
High
ghsa-3x57-m5p4-rgh4
ZendOpenID potential security issue in login mechanism
High
ghsa-9v78-h226-2rmq
Zendframework potential security issue in login mechanism
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.