Low
CVE-2026-25724
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-25723
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
High
CVE-2026-25722
Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection
Medium
CVE-2026-25651
client-certificate-auth Vulnerable to Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect
High
CVE-2026-25640
Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
Critical
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
Medium
CVE-2026-25581
SCEditor has DOM XSS via emoticon URL/HTML injection
High
CVE-2026-25580
Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling
High
CVE-2026-24419
OpenSTAManager has a SQL Injection in the Prima Nota module
High
CVE-2026-24418
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
High
CVE-2026-24417
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service
High
CVE-2026-24416
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
High
CVE-2025-69216
OpenSTAManager has a SQL Injection in Scadenzario Print Template
High
CVE-2025-69214
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
Medium
CVE-2025-12159
Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-13463
Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
Medium
CVE-2025-12803
Bold Builder <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode
Medium
CVE-2025-15267
Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode
Low
CVE-2026-1337
Neo4j Enterprise and Community editions have insufficient escaping of unicode characters in query log
Medium
CVE-2025-15396
Library Viewer < 3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-25330
PublishPress Authors <= 4.10.1 - Missing Authorization
Medium
CVE-2026-31919
Advanced Coupons for WooCommerce Coupons <= 4.7.1 - Missing Authorization
Medium
CVE-2026-24951
myCred <= 2.9.7.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.