Critical
CVE-2026-44484
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
Medium
CVE-2026-42586
Netty Redis Codec Encoder has a CRLF Injection Issue
Medium
CVE-2026-42585
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
High
CVE-2026-42584
Netty has HttpClientCodec response desynchronization
High
CVE-2026-42583
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
High
CVE-2026-42582
Netty HTTP/3 QPACK literal unbounded allocation
Medium
CVE-2026-42581
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Medium
CVE-2026-42580
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
High
CVE-2026-42579
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Low
CVE-2026-42578
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
Low
ghsa-x5hg-x4gv-j98m
OpenSearch has ineffective TLS certificate hostname verification
Medium
ghsa-x83w-23jp-g6pw
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
Low
ghsa-22vx-2x23-98w6
OpenSearch vulnerable to improper authorization for Rollover Requests
Low
ghsa-83x9-vc3c-hghc
OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
Medium
CVE-2026-44308
Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications
Medium
CVE-2026-44479
Vercel: Non-interactive mode includes CLI arguments in suggested command output
Medium
CVE-2025-66105
Bus Ticket Booking with Seat Reservation < 5.6.8 - Missing Authorization
Medium
CVE-2025-62127
WEN Logo Slider <= 3.4.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-25468
Happy Addons for Elementor <= 3.20.8 - Unauthenticated Information Exposure
Medium
CVE-2025-68604
WPGraphQL <= 2.5.3 - Cross-Site Request Forgery
High
CVE-2026-40798
wpForo Forum <= 3.0.4 - Unauthenticated SQL Injection
Medium
CVE-2026-27416
PDF Poster – Display PDF Files with Custom Viewer <= 2.4.1 - Missing Authorization
Medium
CVE-2026-27415
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.