High
CVE-2026-31834
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filters
Medium
CVE-2026-31833
Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering
Medium
CVE-2026-31832
Umbraco Backoffice API Allows Unauthorized Modification of Domain Data
Medium
CVE-2026-31853
ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder
Medium
CVE-2026-30883
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
Medium
CVE-2026-28692
ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
Medium
CVE-2026-28689
ImageMagick has a Path Policy TOCTOU symlink race bypass
High
CVE-2026-26118
Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
Medium
CVE-2026-30227
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
High
CVE-2026-27449
Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints
Medium
CVE-2026-27799
ImageMagick has a heap Buffer Over-read in its DJVU image format handler
Medium
CVE-2026-27798
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
Low
CVE-2026-56362
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
Medium
CVE-2026-56368
ImageMagick: Memory Leak in multiple coders that write raw pixel data
Low
CVE-2026-56371
ImageMagick: Memory leak in coders/txt.c without freetype
Low
CVE-2026-56379
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c
Low
CVE-2026-56378
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
Low
CVE-2026-56373
mageMagick has a possible use-after-free write in its PDB decoder
Low
CVE-2026-56376
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
Low
CVE-2026-25984
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
Medium
CVE-2026-26983
ImageMagick: Invalid MSL <map> can result in a use after free
Medium
CVE-2026-26283
ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
Medium
CVE-2026-26066
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
High
CVE-2026-25989
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.