High
CVE-2026-44516
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2026-41705
Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs
Medium
CVE-2026-6860
Vert.x has a DoS via unbounded server-side SNI SslContext cache growth
High
CVE-2026-44900
epa4all-client has a VAU Signature bypass
High
CVE-2026-44714
bitcoinj has a ScriptExecution P2PKH/P2WPKH Verification Bypass
High
CVE-2026-39816
Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission
High
CVE-2023-42344
Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information
Medium
CVE-2026-41004
Spring Cloud Config Server Logged Sensitive Information
High
CVE-2026-41002
Spring Cloud Config Server Susceptible To TOCTOU Attack
Medium
CVE-2026-44248
Netty MQTT: Resource exhaustion in MqttDecoder
High
CVE-2026-44503
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
High
CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
Medium
CVE-2026-42586
Netty Redis Codec Encoder has a CRLF Injection Issue
Medium
CVE-2026-42585
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
High
CVE-2026-42584
Netty has HttpClientCodec response desynchronization
High
CVE-2026-42583
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
High
CVE-2026-42582
Netty HTTP/3 QPACK literal unbounded allocation
Medium
CVE-2026-42581
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Medium
CVE-2026-42580
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
High
CVE-2026-42579
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Low
CVE-2026-42578
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
Medium
ghsa-x83w-23jp-g6pw
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
Low
ghsa-22vx-2x23-98w6
OpenSearch vulnerable to improper authorization for Rollover Requests
Low
ghsa-83x9-vc3c-hghc
OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.