Unrated
CVE-2026-13234
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
High
CVE-2026-12937
Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter
Unrated
CVE-2026-13233
drupal/ai_provider_openai - SA-CONTRIB-2026-053
Unrated
CVE-2026-13232
drupal/admin_feedback - SA-CONTRIB-2026-052
Unrated
CVE-2026-13231
drupal/admin_feedback - SA-CONTRIB-2026-051
Medium
CVE-2026-44022
Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands
High
CVE-2026-44017
Docling: Unsafe Zip Extraction in EasyOCR Model Download
High
CVE-2026-44020
Docling: Unsafe XML Entity Expansion in USPTO Patent Backend
High
CVE-2026-44016
Docling: Unsafe Playwright-based HTML Rendering
Critical
CVE-2026-45052
OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
Critical
CVE-2026-45051
OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
High
CVE-2026-12986
Payara Server Full has a Cross-Site Request Forgery vulnerability
Medium
CVE-2026-57305
Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability
Medium
CVE-2026-57306
Jenkins Zowe zDevOps Plugin has a CSRF vulnerability
Medium
CVE-2026-57307
Jenkins Zowe zDevOps Plugin has a missing permission check
Medium
CVE-2026-57304
Jenkins Assembla Plugin has a missing permission check
High
CVE-2026-57303
Jenkins Assembla Plugin has an XXE vulnerability
Medium
CVE-2026-57302
Jenkins FitNesse Plugin stores passwords unencrypted
Medium
CVE-2026-57299
Jenkins Contrast Continuous Application Security Plugin missing permission checks
Medium
CVE-2026-57300
Jenkins MCP Server Plugin missing a permission check
Medium
CVE-2026-57298
Jenkins Contrast Continuous Application Security Plugin has a CSRF vulnerability
High
CVE-2026-57301
Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE
Medium
CVE-2026-57291
Jenkins Gitee Plugin missing permission checks
Medium
CVE-2026-57292
Jenkins Gitee Plugin has a cross-site request forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.