High
CVE-2026-30929
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-30226
devalue has prototype pollution in devalue.parse and devalue.unflatten
High
CVE-2026-28693
ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write
High
CVE-2026-28691
ImageMagick has uninitialized pointer dereference in JBIG decoder
Medium
CVE-2026-28690
ImageMagick has stack write buffer overflow in MNG encoder
Medium
CVE-2026-28688
ImageMagick has heap use-after-free in the MSL encoder
Medium
CVE-2026-28687
ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder
Medium
CVE-2026-28686
ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer
High
CVE-2026-28494
ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
Medium
CVE-2026-28493
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
Critical
CVE-2026-27591
Winter vulnerable to privilege escalation by authenticated backend users
Medium
CVE-2026-26284
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
Medium
CVE-2026-25986
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
Medium
CVE-2026-25982
ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
Medium
CVE-2026-25971
ImageMagick: MSL - Stack overflow in ProcessMSLScript
Medium
CVE-2026-25970
ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption
High
CVE-2026-25968
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
Critical
CVE-2026-3059
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
Critical
CVE-2026-3060
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module
Low
CVE-2026-2366
Keycloak vulnerable to authorization bypass via the Admin API
Medium
CVE-2026-31988
yauzl contains an off-by-one error
Low
CVE-2026-3965
@whyour/qinglong: manipulation of the argument command leads to protection mechanism failure
Medium
CVE-2026-2987
Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'
High
CVE-2026-27067
Mobile App Editor – WordPress to Android App Builder <= 1.3.1 - Authenticated (Editor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.