High
CVE-2026-62368
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow
Medium
CVE-2026-62998
REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
High
CVE-2026-76089
Formie: Missing authorization on sent notification resend modal exposes submission PII
High
CVE-2026-76087
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
High
CVE-2026-76086
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
Medium
CVE-2026-92692
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
Unrated
CVE-2026-96382
drupal/diba_carousel - SA-CONTRIB-2026-191
Unrated
CVE-2026-96386
drupal/smart_content - SA-CONTRIB-2026-190
Unrated
CVE-2026-96380
drupal/css_usage_analyzer - SA-CONTRIB-2026-189
Unrated
CVE-2026-96377
drupal/combined_image_style - SA-CONTRIB-2026-188
Unrated
CVE-2026-96392
drupal/ai_ckeditor - SA-CONTRIB-2026-187
Unrated
CVE-2026-96391
drupal/webform_rest - SA-CONTRIB-2026-186
Unrated
CVE-2026-96390
drupal/editoria11y - SA-CONTRIB-2026-185
Unrated
CVE-2026-96388
drupal/tawk_to - SA-CONTRIB-2026-184
Unrated
CVE-2026-96387
drupal/stop_admin - SA-CONTRIB-2026-183
Unrated
CVE-2026-96385
drupal/rest_api_authentication - SA-CONTRIB-2026-182
Unrated
CVE-2026-96379
drupal/cookiecuttr - SA-CONTRIB-2026-181
Unrated
CVE-2026-96384
drupal/mermaid_diagram_field - SA-CONTRIB-2026-180
Unrated
CVE-2026-96378
drupal/commerce_decoupled_checkout - SA-CONTRIB-2026-179
Unrated
CVE-2026-96374
drupal/project_browser - SA-CONTRIB-2026-178
Unrated
CVE-2026-96376
drupal/cloud - SA-CONTRIB-2026-177
Unrated
CVE-2026-96375
drupal/cloud - SA-CONTRIB-2026-176
Unrated
CVE-2026-96355
drupal/webform - SA-CONTRIB-2026-175
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.