Medium
CVE-2026-27022
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2026-26996
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
High
CVE-2026-26318
Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation
High
CVE-2026-26990
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php
Medium
CVE-2026-26989
LibreNMS has a Stored XSS in Alert Rule
High
CVE-2026-26988
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.
Medium
CVE-2026-27016
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()
Medium
CVE-2026-26992
LibreNMS /port-groups name Stored Cross-Site Scripting
Medium
CVE-2026-26991
LibreNMS /device-groups name Stored Cross-Site Scripting
Medium
CVE-2026-26987
LibreNMS affected by reflected xss via email field
High
CVE-2026-26280
Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path
Critical
CVE-2026-26980
Ghost has a SQL injection in Content API
High
CVE-2026-26974
Improper Control of Generation of Code ('Code Injection') in @tygo-van-den-hurk/slyde
Low
CVE-2026-2666
mingSoft MCMS does not properly restrict file uploads
Medium
CVE-2026-2718
Dealia <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes
Medium
CVE-2026-2716
Client Testimonial Slider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting
Medium
CVE-2026-2714
Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Setting
Critical
CVE-2025-14009
NLTK has a Zip Slip Vulnerability
Critical
CVE-2026-1994
s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2026-28468
OpenClaw has an authentication bypass in sandbox browser bridge server
High
CVE-2026-28451
OpenClaw has two SSRF via sendMediaFeishu and markdown image fetching in Feishu extension
High
CVE-2026-29611
OpenClaw has a LFI in BlueBubbles media path handling
Medium
CVE-2026-27486
OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup
Medium
CVE-2026-28477
OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.