High
CVE-2026-22516
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-40730
ThemeGrill Demo Importer <= 2.0.0.6 - Missing Authorization
High
CVE-2026-22506
Amoli <= 1.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22512
Roisin <= 1.2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-39485
Youtube Embed Plus <= 14.2.4 - Missing Authorization
High
CVE-2026-22515
VegaDays - Vegetarian Food Festival & Eco Event WordPress Theme <= 1.2.0 - Unauthenticated Local File Inclusion
High
CVE-2025-15445
Restaurant Cafeteria <= 0.4.6 - Missing Authorization to (Subscriber+) Arbitrary Plugin Installation/Activation
High
CVE-2026-22514
Unica - Event Planning & Wedding WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
High
CVE-2026-22511
NeoBeat <= 1.2 - Unauthenticated Local File Inclusion
High
ghsa-5r2p-pjr8-7fh7
SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
Medium
CVE-2026-56267
Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint
Medium
CVE-2026-56272
Flowise has Insufficient Password Salt Rounds
Medium
CVE-2026-30227
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
High
CVE-2026-30244
Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure
High
CVE-2026-30242
Plane has SSRF via Incomplete IP Validation in Webhook URL Serializer
Low
CVE-2025-11143
org.eclipse.jetty:jetty-http has different parsing of invalid URIs
Medium
CVE-2026-22723
Cloudfoundry UAA has logic error in the token revocation endpoint implementation
High
CVE-2025-70949
@perfood/couch-auth has an Observable Timing Discrepancy
Medium
CVE-2025-70948
@perfood/couch-auth has a host header injection vulnerability
High
CVE-2026-3009
Keycloak allows authentication using an Identity Provider (IdP) even after it has been disabled by an administrator
High
CVE-2026-3047
Keycloak SAML Broken has Authentication Bypass by Primary Weakness
Medium
CVE-2024-43035
Fonoster is vulnerable to directory traversal
Medium
CVE-2026-3419
Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation
High
CVE-2026-1605
The Eclipse Jetty Server Artifact has a Gzip request memory leak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.