High
CVE-2026-81891
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-81890
elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections
High
CVE-2026-81889
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
High
CVE-2026-44521
elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)
High
CVE-2026-41247
elFinder: Command injection in resize background color parameter when using ImageMagick CLI
High
CVE-2024-38909
Studio 42 elFinder vulnerable to Incorrect Access Control
High
CVE-2023-35840
elFinder vulnerable to path traversal in LocalVolumeDriver connector
Critical
CVE-2019-9194
elFinder command injection vulnerability in the PHP connector
Critical
CVE-2018-9110
Directory Traversal in Studio 42 elFinder
Medium
CVE-2019-5884
Sensitive Data Exposure in elFinder
Critical
CVE-2018-9109
elFinder Path Traversal vulnerability
High
CVE-2019-6257
elFinder Server Side Request Forgery (SSRF)
Critical
CVE-2022-27115
RCE in Studio-42 elFinder on Windows before 2.1.61
Critical
CVE-2021-43421
elFinder Unrestricted File Upload vulnerability
Critical
CVE-2022-26960
Path Traversal in Studio-42 elFinder through 2.1.60
Medium
CVE-2021-45919
Studio 42 elFinder allows stored XSS
Critical
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
High
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.