High
CVE-2026-55584
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filters
High
CVE-2026-55516
Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update
Medium
CVE-2026-55481
Snipe-IT has CSS Injection via `header_color` Setting
Medium
CVE-2026-55479
Snipe-IT has incorrect permission for legacy license checkin API
Medium
CVE-2026-55476
Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter
Medium
CVE-2026-55466
Snipe-IT vulnerable to stored XSS via inline-served attachment
Medium
CVE-2026-55464
Snipe-IT vulnerable to stored XSS via Markdown custom field
Medium
CVE-2026-55462
Snipe-IT has an authorization bypass on print inventory page
Medium
CVE-2026-55461
Snipe-IT has an Open Redirect After User Edit
High
CVE-2026-55460
Snipe-IT has an authorization bypass on bulk editing users
Medium
CVE-2026-55452
Snipe-IT has CSV formula injection in Activity Report export
High
CVE-2026-57584
Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS
High
CVE-2026-54736
Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)
High
CVE-2026-54718
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
High
CVE-2026-54721
silverstripe/userforms vulnerable to remote code execution via userforms email subject
Low
CVE-2026-44701
OpenSTAManager has HTML Injection in modules/utenti/edit.php
High
CVE-2026-84192
LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates
Unrated
CVE-2026-81160
drupal/slick - SA-CONTRIB-2026-117
Unrated
CVE-2026-81201
drupal/monster_menus - SA-CONTRIB-2026-116
Unrated
CVE-2026-81162
drupal/dxpr_builder - SA-CONTRIB-2026-112
Unrated
CVE-2026-16647
drupal/disable_login - SA-CONTRIB-2026-111
Unrated
CVE-2026-81161
drupal/content_moderation_notifications - SA-CONTRIB-2026-107
Unrated
CVE-2026-81168
drupal/captcha_protected_page - SA-CONTRIB-2026-105
Medium
CVE-2026-54614
cakephp/debug_kit: MailPreview contains unsafe reflection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.