High
CVE-2026-6381
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-6495
Ajax Load More – Infinite Scroll, Load More, & Lazy Load < 7.8.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-10077
YOOtheme Pro <= 5.0.34 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2026-48063
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload
Medium
CVE-2026-53698
Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set
Unrated
CVE-2026-11915
drupal/bfap_sb - SA-CONTRIB-2026-047
Unrated
CVE-2026-11914
drupal/composer - SA-CONTRIB-2026-046
Unrated
CVE-2026-11913
drupal/mothermayi - SA-CONTRIB-2026-045
Unrated
CVE-2026-11909
drupal/examples - SA-CONTRIB-2026-044
Unrated
CVE-2026-11908
drupal/tagify - SA-CONTRIB-2026-043
High
CVE-2025-53114
Acknowledgement extension out of memory
Critical
CVE-2026-10795
UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 (free) < 2.26.5 (premium) - Unauthenticated Authentication Bypass via UpdraftCentral udrpc
Medium
CVE-2026-53438
Jenkins: Missing permission check allows unauthorized cancellation of queue items
Medium
CVE-2026-53442
Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
Medium
CVE-2026-53437
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
Medium
CVE-2026-53436
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Medium
CVE-2026-53439
Jenkins exposes other users' timezone and view names to users with Overall/Read permission
High
CVE-2026-53435
Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation
Medium
CVE-2026-53440
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
High
CVE-2026-53441
Jenkins: Stored XSS vulnerability in node offline cause description
High
CVE-2025-71329
image-size: JXL and HEIF parsers allow denial of service through infinite loops
High
CVE-2025-71330
image-size: ICNS parser allows denial of service through an infinite loop
Low
CVE-2026-48051
Papra HTTP redirect bypass can lead to SSRF via webhook delivery system
Medium
CVE-2026-48037
@hulumi/baseline: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.