High
CVE-2026-67340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
High
CVE-2026-65831
ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read
High
CVE-2026-54076
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
High
CVE-2026-54077
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
High
CVE-2026-50270
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
High
CVE-2026-44891
Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
High
CVE-2026-59955
Apollo ConfigService access key authentication bypass via raw config file appId parsing
High
CVE-2026-59954
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
Medium
CVE-2025-32781
Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
Medium
CVE-2026-49844
Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization
High
CVE-2026-49485
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Medium
ghsa-q6gh-6v2r-hjv3
Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
High
ghsa-387m-935m-c4vw
Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
High
CVE-2026-49464
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
Medium
CVE-2026-49463
NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
Medium
CVE-2026-49833
DSpace: Path Traversal is possible through LDN message generation
Medium
CVE-2026-49830
DSpace: ORE resource URI does not validate scheme for non-web resources
Medium
CVE-2026-49831
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
High
CVE-2026-49832
DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN
High
CVE-2024-7768
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
High
CVE-2026-34151
XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+
Low
CVE-2023-41329
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Medium
CVE-2023-32732
gRPC connection termination issue
High
CVE-2023-1428
gRPC Reachable Assertion issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.