Medium
CVE-2026-2367
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2026-27584
ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints
Medium
CVE-2026-27567
Payload: Server-Side Request Forgery (SSRF) in External File URL Uploads
Medium
CVE-2026-2479
Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
Medium
CVE-2026-27461
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
High
CVE-2026-1929
Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter
High
CVE-2026-2416
Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter
High
CVE-2026-1916
WPGSI: Spreadsheet Integration <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token
Medium
CVE-2026-1614
Rise Blocks – A Complete Gutenberg Page Builder <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes
Critical
CVE-2025-69985
FUXA has JWT Authentication Bypass via HTTP Referer header spoofing
Medium
CVE-2026-27156
NiceGUI vulnerable to XSS via Code Injection during client-side element function execution
Critical
CVE-2026-27574
OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE
Medium
CVE-2026-27129
Craft CMS: Cloud Metadata SSRF Protection Bypass via IPv6 Resolution
Medium
CVE-2026-26983
ImageMagick: Invalid MSL <map> can result in a use after free
Medium
CVE-2026-26283
ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
Medium
CVE-2026-26066
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
High
CVE-2026-25989
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
Medium
CVE-2026-25988
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
Medium
CVE-2026-25987
ImageMagick has a heap buffer over-read in its MAP image decoder
High
CVE-2026-25985
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
Medium
CVE-2026-25983
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Medium
CVE-2026-25969
Image Magick has a Memory Leak in coders/ashlar.c
High
CVE-2026-25967
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
Medium
CVE-2026-25966
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.