Low
CVE-2026-56393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filters
High
CVE-2026-28696
Craft CMS has IDOR via GraphQL @parseRefs
Medium
CVE-2026-28695
Craft CMS Vulnerable to Authenticated RCE via Twig SSTI - create() function + Symfony Process gadget
Critical
CVE-2026-26279
Froxlor has Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection
Medium
CVE-2026-24415
OpenSTAManager Affected by XSS in modifica_iva.php via righe parameter
High
CVE-2026-28507
Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
Critical
CVE-2026-28501
AVideo has Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php
Low
CVE-2026-56383
Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type
Unrated
CVE-2026-3216
drupal/canvas - SA-CONTRIB-2026-017
Medium
CVE-2026-27621
TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload
Medium
CVE-2026-27129
Craft CMS: Cloud Metadata SSRF Protection Bypass via IPv6 Resolution
Medium
CVE-2026-27126
Craft CMS has Stored XSS in Table Field via "HTML" Column Type
High
CVE-2026-26990
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php
High
CVE-2026-26988
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.
Medium
CVE-2026-27016
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()
Medium
CVE-2026-26992
LibreNMS /port-groups name Stored Cross-Site Scripting
Medium
CVE-2026-26991
LibreNMS /device-groups name Stored Cross-Site Scripting
Medium
CVE-2026-26987
LibreNMS affected by reflected xss via email field
Medium
CVE-2019-25317
Kimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions
High
CVE-2026-25495
Craft CMS Vulnerable to SQL Injection in Element Indexes via `criteria[orderBy]`
Medium
CVE-2026-25494
Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via Alternative IP Notation
High
CVE-2026-24419
OpenSTAManager has a SQL Injection in the Prima Nota module
High
CVE-2026-24418
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
High
CVE-2026-24416
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.