Low
CVE-2026-46584
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filters
High
CVE-2026-42527
Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure
Critical
CVE-2026-46455
Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted
High
CVE-2026-46457
Apache Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers
Critical
CVE-2026-54617
LaunchServer FileServerHandler has an unauthenticated path traversal issue
High
CVE-2026-53712
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
Low
ghsa-j6hm-v3x2-qv6j
land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory
Low
CVE-2026-49989
CrateDB's Blob HTTP handler bypasses authorization
High
CVE-2026-47424
OpenAM Authenticated RCE via Groovy Sandbox Escape
High
CVE-2026-46560
OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing
High
CVE-2026-45794
OpenAM has Unsafe Java Deserialization via SNS
Critical
CVE-2026-45052
OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
Critical
CVE-2026-45051
OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
High
CVE-2026-12986
Payara Server Full has a Cross-Site Request Forgery vulnerability
Medium
CVE-2026-57305
Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability
Medium
CVE-2026-57304
Jenkins Assembla Plugin has a missing permission check
High
CVE-2026-57303
Jenkins Assembla Plugin has an XXE vulnerability
Medium
CVE-2026-57300
Jenkins MCP Server Plugin missing a permission check
Medium
CVE-2026-57298
Jenkins Contrast Continuous Application Security Plugin has a CSRF vulnerability
Medium
CVE-2026-57289
Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation
Medium
CVE-2026-57297
Jenkins Contrast Continuous Application Security Plugin has a missing permission check
Medium
CVE-2026-57285
Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
Critical
CVE-2026-46495
OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
Medium
CVE-2026-44202
OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.