High
CVE-2026-41849
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
High
CVE-2026-41720
Spring LDAP has Authentication Bypass with Empty Password
Medium
CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
High
CVE-2026-41845
Spring Framework Cross-site Scripting via JavaScriptUtils
High
CVE-2026-41842
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
Medium
CVE-2026-41844
Spring Framework Open Redirect in Spring MVC and WebFlux
Medium
CVE-2026-41843
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
Medium
CVE-2026-41839
Spring Framework Escalation via Session Fixation in WebFlux
Medium
CVE-2026-41715
Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
Medium
CVE-2026-41710
Spring Retry has Cache Exhaustion in Stateful Retries that leads to Denial of Service
Medium
CVE-2026-41838
Spring Framework Predictable Session ID in WebSocket Module
High
CVE-2026-41007
Spring HATEOAS heap exhaustion through unbounded internal caching
High
CVE-2026-41006
Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration
High
CVE-2026-40983
Micrometer gRPC server instrumentation DoS
High
CVE-2026-40984
Micrometer HTTP server instrumentations DoS
Medium
CVE-2016-20063
Simple Personal Message <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-11590
Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated SQL Injection
High
CVE-2017-20249
Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-8444
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
High
CVE-2026-52693
eCommerce Product Catalog Plugin for WordPress <= 3.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-9576
Fluent Booking <= 2.1.1 - Authenticated (Calendar Manager+) Information Exposure
Medium
CVE-2026-11581
Kali Forms <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2017-20245
Wow Viral Signups <= 2.1 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.