High
CVE-2026-21449
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-21447
Bagisto has IDOR in Customer Order Reorder Functionality
High
CVE-2026-21448
Bagisto has Normal & Blind SSTI from low-privilege user when ordering product
High
CVE-2026-21450
Bagisto SSTI vulnerability in type parameter can lead to RCE
Medium
CVE-2026-21451
Bagisto has HTML Filter Bypass that Enables Stored XSS
High
CVE-2026-21446
Bagisto Missing Authentication on Installer API Endpoints
High
CVE-2026-21445
Langflow Missing Authentication on Critical API Endpoints
Critical
CVE-2026-21440
AdonisJS Path Traversal in Multipart File Handling
Critical
CVE-2025-68620
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
Medium
CVE-2025-69203
Signal K Server Vulnerable to Access Request Spoofing
High
CVE-2025-68619
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Medium
CVE-2025-68273
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
High
CVE-2025-68272
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
Critical
CVE-2025-66398
Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)
Medium
CVE-2026-22430
Verdure <= 1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-22426
Sweet Jane <= 1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-22404
Innovio <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2026-24961
Grand Blog < 3.1.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-22411
Dolcino <= 1.6 - Authenticated (subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-22406
Overton <= 1.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68044
Five Star Restaurant Reservations <= 2.7.4 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-67914
VidMov <= 2.3.8 - Authenticated (Subscriber+) Path Traversal
Medium
CVE-2026-22409
Justicia <= 1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-47555
Tutor LMS <= 3.9.4 - Authenticated (Instructor+) Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.