Medium
CVE-2026-54179
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filters
Medium
CVE-2026-61807
Snipe-IT: Stored DOM XSS via table selected-count IDs
Medium
CVE-2026-84188
LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users
Medium
CVE-2026-84190
LibreNMS Vulnerable to Remote Code Execution via AboutController
High
CVE-2026-54348
Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
High
CVE-2026-54347
Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover
High
CVE-2026-55072
Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name
Medium
CVE-2026-54164
API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)
Medium
CVE-2026-72787
Craft CMS: Stored XSS in the control panel via unescaped draft name
High
CVE-2026-72781
Craft CMS: Authenticated RCE through Twig sandbox escape
High
ghsa-jfm3-95jq-q3rf
league/commonmark: Denial of service via duplicate footnote definitions
Medium
CVE-2026-71478
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
Medium
CVE-2026-54768
WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)
High
CVE-2026-53599
Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
Low
CVE-2026-52838
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS
High
ghsa-g3hq-hphg-8fhh
Pheditor: Terminal command-allowlist bypass via argument injection leads to RCE — surviving vector after the metacharacter-sanitization fixes
High
CVE-2026-59932
PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion
Medium
CVE-2026-59942
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
Medium
CVE-2026-59941
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Medium
CVE-2026-56722
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Low
CVE-2026-55555
Dompdf: File existence oracle via font-face stylesheet declaration
High
CVE-2026-55578
Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
High
CVE-2026-47142
MantisBT: SQL Injection via history_order Configuration Value
Critical
ghsa-hgjx-r89m-m7v4
FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.