High
CVE-2026-44241
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filters
High
CVE-2026-42440
Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
Critical
CVE-2026-40076
OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)
High
CVE-2026-40075
OpenMRS ModuleResourcesServlet has Path Traversal that Leads to Arbitrary File Read
Critical
CVE-2026-42778
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)
Critical
CVE-2026-42779
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)
Critical
CVE-2026-41409
Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)
Critical
CVE-2026-41635
Apache MINA vulnerable to Deserialization of Untrusted Data
Critical
CVE-2026-40860
Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage
High
CVE-2026-41166
OpenRemote has Improper Access Control via updateUserRealmRoles function
Medium
CVE-2026-22747
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Medium
CVE-2026-41245
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
Medium
CVE-2026-34164
Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService
High
CVE-2026-40882
OpenRemote has XXE in Velbus Asset Import
Critical
CVE-2026-39842
Expression Injection in OpenRemote
Medium
CVE-2026-33929
Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code
Medium
CVE-2026-40180
quarkus-openapi-generator extension has Zip Slip Path Traversal in ApicurioCodegenWrapper class
Critical
CVE-2026-33728
dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
High
CVE-2025-70952
pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names
High
CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
High
CVE-2026-33001
Jenkins has a link following vulnerability allows arbitrary file creation
High
CVE-2026-22729
JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
Low
CVE-2026-2741
Vaadin: Specially crafted ZIP archives can escape the intended extraction directory
Medium
CVE-2026-23907
Apache PDFBox has Path Traversal through PDComplexFileSpecification.getFilename() function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.