Medium
CVE-2026-24739
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Unrated
pysec-2026-1
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
High
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
Medium
CVE-2020-36962
Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads
Medium
CVE-2025-57283
BrowserStack Local vulnerable to Command Injection through logfile variable
Medium
CVE-2025-61140
JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js
Unrated
CVE-2026-1554
drupal/cas_server - SA-CONTRIB-2026-007
Unrated
CVE-2026-1553
drupal/canvas - SA-CONTRIB-2026-006
High
CVE-2026-24842
node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
High
CVE-2026-24837
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
High
CVE-2026-24836
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
Medium
CVE-2026-24784
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
High
CVE-2026-24778
Ghost vulnerable to XSS via malicious Portal preview links
Medium
CVE-2026-24771
Hono vulnerable to XSS through ErrorBoundary component
Medium
ghsa-gpx9-96j6-pp87
TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)
High
ghsa-h25m-26qc-wcjf
Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components
Medium
CVE-2025-59472
Next.js has Unbounded Memory Consumption via PPR Resume Endpoint
High
CVE-2026-1513
billboard.js is vulnerable to XSS during chart option binding
Medium
CVE-2026-24909
vlt Mishandles Path Sanitization for tar
Medium
CVE-2026-25420
MailerLite – Signup forms (official) <= 1.7.18 - Missing Authorization
High
CVE-2025-69365
Uroan Core <= 1.4.4 - Unauthenticated SQL Injection
Medium
CVE-2026-25419
UpsellWP <= 2.2.5 - Missing Authorization
Medium
CVE-2026-25422
Popularis Extra <= 1.2.10 - Cross-Site Request Forgery
Medium
CVE-2026-25409
JAMstack Deployments <= 1.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.