Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Open Redirect
CVE-2026-55590
Affects
cakephp/authentication
| Versions
<3.3.6
>=4.0.0, <4.1.1
C
SQL Injection
CVE-2026-79752
Affects
cakephp/cakephp
| Versions
<4.5.12
>=4.6.0, <4.6.5
>=5.0.0, <5.1.9
>=5.2.0, <5.2.14
>=5.3.0, <5.3.7
C
SQL Injection
CVE-2026-77635
Affects
cakephp/cakephp
| Versions
>=5.1.0, <5.1.10
>=5.2.0, <5.2.15
>=5.3.0, <5.3.7
H
CRLF Injection
CVE-2026-77634
Affects
cakephp/cakephp
| Versions
>=4.5.0, <4.5.12
>=4.6.0, <4.6.5
>=5.0.0, <5.1.9
>=5.2.0, <5.2.14
>=5.3.0, <5.3.7
M
PHP Remote File Inclusion
CVE-2026-48820
Affects
cakephp/cakephp
| Versions
<4.5.11
>=4.6.0, <4.6.4
>=5.0.0, <5.1.7
>=5.2.0, <5.2.13
>=5.3.0, <5.3.6
M
Cross-site Scripting (XSS)
CVE-2026-23643
Affects
cakephp/cakephp
| Versions
>=5.2.10, <5.2.12
>=5.3.0-RC1, <5.3.1
M
Cross-site Request Forgery (CSRF)
CVE-2020-35239
Affects
cakephp/cakephp
| Versions
>=4.0.0, <4.0.10
>=4.1.0, <4.1.4
H
Cross-site Request Forgery (CSRF)
CVE-2015-8379
Affects
cakephp/cakephp
| Versions
>=2.0.0-alpha, <3.1.5
M
XML External Entity (XXE) Injection
CVE-2012-4399
Affects
cakephp/cakephp
| Versions
>=2.1.0-alpha, <2.1.5
>=2.2.0-beta, <2.2.1
M
Access Control Bypass
Affects
cakephp/cakephp
| Versions
>=2.0.0, <2.0.99
>=2.1.0, <2.1.99
>=2.2.0, <2.2.99
>=2.3.0, <2.3.99
>=2.4.0, <2.4.99
>=2.5.0, <2.5.9
>=2.6.0, <2.6.11
>=2.7.0, <2.7.2
M
PHP Remote File Inclusion
Affects
cakephp/cakephp
| Versions
>=2.0.0, <2.0.99
>=2.1.0, <2.1.99
>=2.2.0, <2.2.99
>=2.3.0, <2.3.99
>=2.4.0, <2.4.99
>=2.5.0, <2.5.99
>=2.6.0, <2.6.12
>=2.7.0, <2.7.6
>=3.0.0, <3.0.15
>=3.1.0, <3.1.4
M
Cross-site Scripting (XSS)
Affects
cakephp/cakephp
| Versions
>=3.4.0, <3.4.14
>=3.6.0, <3.6.4
>=3.5.0, <3.5.17
H
SQL Injection
CVE-2023-22727
Affects
cakephp/cakephp
| Versions
<4.2.12
>=4.3.0-RC1, <4.3.11
>=4.4.0-RC1, <4.4.10
H
Cross-site Request Forgery (CSRF)
CVE-2020-15400
Affects
cakephp/cakephp
| Versions
<3.10.3
>=4.0.0-alpha1, <4.0.6
M
Deserialization of Untrusted Data
CVE-2019-11458
Affects
cakephp/cakephp
| Versions
>=3.6.0, <3.6.15
>=3.7.0, <3.7.7
>=3.0.0, <3.5.18
M
Cross-site Scripting (XSS)
Affects
cakephp/cakephp
| Versions
>=3.6.0, <3.6.4
>=3.4.0, <3.4.14
>=3.5.0, <3.5.17
H
Arbitrary File Inclusion
Affects
cakephp/cakephp
| Versions
>=2.6.0, <2.6.12
>=2.7.0, <2.7.6
>=3.0.0, <3.0.15
>=3.1.0, <3.1.4
M
Access Restriction Bypass
Affects
cakephp/cakephp
| Versions
<2.5.9
>=2.6.0, <2.6.11
>=2.7.0, <2.7.2
H
Denial of Service (DoS)
Affects
cakephp/cakephp
| Versions
<2.6.6
>=3.0.0, <3.0.6
M
Cross-site Request Forgery (CSRF)
Affects
cakephp/cakephp
| Versions
>=3.0.0, <3.0.4
H
Cross Domain Form Submission
Affects
cakephp/cakephp
| Versions
<1.3.18
>=2.0.0, <2.4.8
C
SQL Injection
CVE-2026-79752
Affects
cakephp/database
| Versions
<4.5.12
>=4.6.0, <4.6.5
>=5.0.0, <5.1.9
>=5.2.0, <5.2.14
>=5.3.0, <5.3.7
C
SQL Injection
CVE-2026-77635
Affects
cakephp/database
| Versions
>=5.1.0, <5.1.10
>=5.2.0, <5.2.15
>=5.3.0, <5.3.7
M
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-54614
Affects
cakephp/debug_kit
| Versions
<4.10.3
>=5.0.0, <5.2.4
M
Incomplete Comparison with Missing Factors
CVE-2026-54713
Affects
cakephp/queue
| Versions
>=0.1.10, <2.3.1
H
SQL Injection
CVE-2019-15537
Affects
cesnet/simplesamlphp-module-proxystatistics
| Versions
<3.1.0
M
Cross-site Scripting (XSS)
CVE-2025-48883
Affects
chrome-php/chrome
| Versions
<1.14.0
H
Arbitrary File Write
Affects
connect-parse-php
| Versions
*
M
Command Injection
CVE-2014-125107
Affects
corveda/php-sandbox
| Versions
<1.3.5
L
Improper Handling of Case Sensitivity
CVE-2026-87876
Affects
cups-php
| Versions
*