Critical
CVE-2026-46454
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
CVE-2026-43867
Apache Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter
High
CVE-2026-43865
Apache Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution
Critical
CVE-2026-40047
Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer
Medium
CVE-2026-14802
react-dev-utils openBrowser permits command injection on macOS
High
CVE-2026-24012
Uncontrolled Resource Consumption vulnerability in Apache IoTDB.
Critical
CVE-2026-24014
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port i
Critical
CVE-2026-24013
Authentication Bypass by Spoofing vulnerability in Apache IoTDB.
High
CVE-2022-37189
MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)
Medium
CVE-2022-2806
sosreport Exposure of Sensitive Information vulnerability
Medium
CVE-2022-1930
Regular expression denial of service in eth-account
High
CVE-2022-23451
Barbican authorization flaw before v14.0.0
Medium
CVE-2022-23452
openstack-barbican Denial of Service vulnerability
High
CVE-2022-38362
Remote code execution in Apache Airflow Docker's Provider
High
CVE-2022-31116
Incorrect handling of invalid surrogate pair characters
High
CVE-2022-35920
sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs
Medium
CVE-2018-25045
Django REST framework XSS Vulnerability
Medium
CVE-2022-31153
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
Low
CVE-2022-2822
OctoPrint does not have rate limiting on the login page
Low
CVE-2022-37394
OpenStack Nova Changing vnic_type breaks compute service restart
High
CVE-2022-2111
Unrestricted Attachment Upload
High
CVE-2022-2112
CSV Injection in inventree
Medium
CVE-2022-31117
Potential double free of buffer during string decoding
Medium
CVE-2022-29773
Access control issue in AlekSIS-Core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.