High
CVE-2026-84192
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
Unrated
CVE-2026-81160
drupal/slick - SA-CONTRIB-2026-117
Unrated
CVE-2026-81201
drupal/monster_menus - SA-CONTRIB-2026-116
Unrated
CVE-2026-81205
drupal/ldap_auth - SA-CONTRIB-2026-115
Unrated
CVE-2026-81164
drupal/entity_pdf - SA-CONTRIB-2026-114
Unrated
CVE-2026-81158
drupal/entity - SA-CONTRIB-2026-113
Unrated
CVE-2026-81162
drupal/dxpr_builder - SA-CONTRIB-2026-112
Unrated
CVE-2026-16647
drupal/disable_login - SA-CONTRIB-2026-111
Unrated
CVE-2026-81166
drupal/digital_signage_framework - SA-CONTRIB-2026-109
Unrated
CVE-2026-81269
drupal/datafield - SA-CONTRIB-2026-108
Unrated
CVE-2026-81161
drupal/content_moderation_notifications - SA-CONTRIB-2026-107
Unrated
CVE-2026-81159
drupal/commerce_cybersource - SA-CONTRIB-2026-106
Unrated
CVE-2026-81168
drupal/captcha_protected_page - SA-CONTRIB-2026-105
Unrated
CVE-2026-81165
drupal/blazy - SA-CONTRIB-2026-104
Unrated
CVE-2026-81167
drupal/address_suggestion - SA-CONTRIB-2026-103
Medium
CVE-2026-54614
cakephp/debug_kit: MailPreview contains unsafe reflection
High
CVE-2026-57995
phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold
Medium
CVE-2026-57994
phpMyFAQ public FAQ APIs expose inactive FAQ content
Medium
CVE-2026-57961
phpMyFAQ has Potential Authenticated Path Traversal in PDF Export
High
CVE-2026-63135
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
Critical
CVE-2026-59989
Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)
Medium
CVE-2026-86197
Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin
Medium
ghsa-hq84-x37p-j6q5
Winter: Reflected XSS through the search query parameter in the backend Table widget
Medium
ghsa-p2ch-c2c3-4xm5
Winter: CSRF through AJAX handler names reachable as backend page actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.