Unrated
CVE-2026-15085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
Unrated
CVE-2026-15084
drupal/ui_patterns - SA-CONTRIB-2026-075
Unrated
CVE-2026-15083
drupal/eca - SA-CONTRIB-2026-074
Unrated
CVE-2026-15082
drupal/siteimprove_analytics - SA-CONTRIB-2026-073
Unrated
CVE-2026-15081
drupal/location_selector - SA-CONTRIB-2026-072
Unrated
CVE-2026-15080
drupal/lingotek - SA-CONTRIB-2026-071
Unrated
CVE-2026-15079
drupal/login_disable - SA-CONTRIB-2026-070
Low
ghsa-gq4g-fpc9-vjfq
Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection
Medium
CVE-2026-45016
EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
High
CVE-2026-40187
EGroupware has Authenticated RCE via Malicious eTemplate Upload
Critical
CVE-2026-27823
EGroupware has a Remote Code Execution Vulnerability
High
CVE-2026-55794
Craft CMS: Potential authenticated Remote Code Execution via referrer redirect
Medium
CVE-2026-55793
Craft CMS: Stored XSS via Structure entry title in table view
Medium
CVE-2026-55792
Craft CMS: Sensitive File Disclosure / Server-Side File Read
High
CVE-2026-55790
Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget
Medium
CVE-2026-56384
Craft CMS: Authenticated "assets/preview-thumb" discloses signed fallback transform preview link to CP users without asset-view permission
Critical
CVE-2026-52889
Formie Hidden field defaults vulnerable to Server-Side Template Injection
High
CVE-2026-49284
SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`
Low
CVE-2026-80197
Kimai Favorite Timesheet Add and Remove Endpoints Allows Cross-User Bookmark Manipulation
High
CVE-2026-49289
SimpleSAMLphp has Possible DoS via XPath Transform
High
CVE-2026-49283
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
High
CVE-2026-50282
Craft CMS Vulnerable to Unauthorized Deletion of Destination Folders During Forced Moves
High
CVE-2026-50281
Craft CMS's mass assignment via id in newAttributes during bulk duplicate overwrites existing elements
Medium
CVE-2026-9811
Mautic has Stored Cross-Site Scripting (XSS) in Project Option Selector
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.