High
CVE-2026-22750
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2026-1115
parisneo/lollms vulnerable to stored XSS in the social feature
Low
CVE-2026-6011
OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts
Medium
CVE-2026-33551
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application
Medium
CVE-2026-5986
Zod jsVideoUrlParser vulnerable to ReDoS in util.js
High
CVE-2026-34487
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File
High
CVE-2026-34483
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
High
Exploited in attacks
CVE-2026-34486
Apache Tomcat Missing Encryption of Sensitive Data vulnerability
Medium
CVE-2026-34500
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
High
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Medium
CVE-2026-25854
Apache Tomcat has an Open Redirect vulnerability
High
CVE-2026-29146
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor
Medium
CVE-2026-32990
Apache Tomcat has an Improper Input Validation vulnerability
Critical
CVE-2026-29145
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
High
CVE-2026-29129
Apache Tomcat: Configured cipher preference order not preserved
High
CVE-2026-4162
Gravity SMTP <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Plugin Uninstall
Medium
ghsa-9gjv-jvm7-vv2v
Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users
Low
CVE-2026-41915
OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant)
Medium
CVE-2026-39315
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()
Medium
CVE-2026-34983
Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be trigg
Medium
CVE-2026-40046
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound
High
CVE-2026-34020
Apache OpenMeetings Uses GET Request Method With Sensitive Query Strings
Medium
CVE-2026-33005
Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability
High
CVE-2026-33266
Apache OpenMeetings Uses Hard-coded Cryptographic Key
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.