Critical
CVE-2026-54760
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
Critical
CVE-2026-55615
Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
Medium
CVE-2026-54724
Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint
High
CVE-2026-55786
flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`
High
CVE-2026-55787
flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
High
CVE-2026-49360
Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB
High
CVE-2022-46292
Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)
High
CVE-2026-52817
Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments
High
CVE-2026-49852
joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
Critical
CVE-2026-52830
fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection
High
CVE-2026-50181
Langroid: Path traversal in the file tools allows read/write outside configured current directory
High
CVE-2026-50180
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Low
CVE-2026-49292
Kiwi TCMS's /init-db/ page renders and responds to requests after first use
High
CVE-2026-52726
Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
High
CVE-2022-46289
Open Babel has out-of-bounds write in ORCA nAtoms parser
High
CVE-2022-43607
Open Babel has out-of-bounds write in MOL2 attribute/value parser
High
CVE-2022-42885
Open Babel has uninitialized pointer dereference in GRO residue parser
High
CVE-2022-44451
Open Babel has uninitialized pointer dereference in MSI atom parser
High
CVE-2022-46294
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
High
CVE-2022-46291
Open Babel has out-of-bounds write in Gaussian translationVectors[]
Critical
CVE-2026-50027
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
High
CVE-2022-46293
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
High
CVE-2022-46280
Open Babel has uninitialized pointer dereference in PQS pFormat
High
CVE-2022-46290
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.