Medium
CVE-2026-31832
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 529
Reset filters
Medium
CVE-2026-28689
ImageMagick has a Path Policy TOCTOU symlink race bypass
Medium
CVE-2026-30227
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
High
CVE-2026-27449
Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints
Low
CVE-2026-56362
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
Low
CVE-2026-56371
ImageMagick: Memory leak in coders/txt.c without freetype
Low
CVE-2026-56373
mageMagick has a possible use-after-free write in its PDB decoder
Low
CVE-2026-56376
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
Medium
CVE-2026-26283
ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
Medium
CVE-2026-26066
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
Medium
CVE-2026-25988
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
High
CVE-2026-25985
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
Medium
CVE-2026-25966
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
High
CVE-2026-25965
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
Medium
CVE-2026-25799
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
Medium
CVE-2026-25798
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
Medium
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
Medium
CVE-2026-25795
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
High
CVE-2026-24485
ImageMagick: Infinite loop vulnerability when parsing a PCD file
Medium
CVE-2026-24484
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
High
CVE-2026-24481
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
High
CVE-2026-21218
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability
Critical
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
Medium
CVE-2026-24687
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.