Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-61609
Affects pterodactyl/panel | Versions >=1.7.0, <1.13.0
Has fix
ComposerPublished 29 Jul 2026
  • H
Improper Restriction of Security Token AssignmentCVE-2026-54593
Affects pterodactyl/panel | Versions <1.12.3
Has fix
ComposerPublished 29 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-63107
Affects limesurvey/limesurvey | Versions >=0.0.0
Has fix
ComposerPublished 25 Jul 2026
  • M
Missing AuthorizationCVE-2026-63092
Affects medienbaecker/kirby-modules | Versions <5.5.8
Has fix
ComposerPublished 25 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-26483
Affects mettle/sendportal | Versions >=0.0.0
Has fix
ComposerPublished 25 Jul 2026
  • M
Directory TraversalCVE-2026-16767
Affects nelexa/zip | Versions >=0.0.0
Has fix
ComposerPublished 25 Jul 2026
  • H
Incorrect Permission Assignment for Critical ResourceCVE-2026-63358
Affects filegator/filegator | Versions <7.14.3
Has fix
ComposerPublished 25 Jul 2026
  • H
Arbitrary Code InjectionCVE-2026-65693
Affects microweber/microweber | Versions >=0.0.0
Has fix
ComposerPublished 25 Jul 2026
  • H
Arbitrary Argument Injection
Affects pheditor/pheditor | Versions <2.0.7
Has fix
ComposerPublished 25 Jul 2026
  • C
Authentication Bypass by Assumed-Immutable Data
Affects pheditor/pheditor | Versions <2.0.8
Has fix
ComposerPublished 25 Jul 2026
  • H
Authorization Bypass Through User-Controlled Key
Affects poweradmin/poweradmin | Versions >=3.0.0, <3.9.11>=4.0.0, <4.2.5>=4.3.0, <4.3.4
Has fix
ComposerPublished 25 Jul 2026
  • H
Missing Authorization
Affects poweradmin/poweradmin | Versions >=4.0.0, <4.2.5>=4.3.0, <4.3.4
Has fix
ComposerPublished 25 Jul 2026
  • H
Improper Authentication
Affects poweradmin/poweradmin | Versions >=4.1.0, <4.2.5>=4.3.0, <4.3.4
Has fix
ComposerPublished 25 Jul 2026
  • H
Infinite loopCVE-2026-59933
Affects phpoffice/phpspreadsheet | Versions <1.30.6>=2.0.0, <2.1.18>=2.2.0, <2.4.7>=3.3.0, <3.10.7>=4.0.0, <5.8.1
Has fix
ComposerPublished 25 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-59931
Affects phpoffice/phpspreadsheet | Versions <1.30.6>=2.0.0, <2.1.18>=2.2.0, <2.4.7>=3.3.0, <3.10.7>=4.0.0, <5.8.1
Has fix
ComposerPublished 25 Jul 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-59932
Affects phpoffice/phpspreadsheet | Versions <1.30.6>=2.0.0, <2.1.18>=2.2.0, <2.4.7>=3.3.0, <3.10.7>=4.0.0, <5.8.1
Has fix
ComposerPublished 25 Jul 2026
  • M
Denial of Service (DoS)CVE-2026-59941
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-59942
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-59943
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
  • M
Directory TraversalCVE-2026-56722
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
  • L
Directory TraversalCVE-2026-55554
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
  • L
Information ExposureCVE-2026-55555
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')CVE-2026-65608
Affects getgrav/grav | Versions >=1.7.0, <2.0.9
Has fix
ComposerPublished 25 Jul 2026
  • C
Arbitrary Code InjectionCVE-2026-65008
Affects getgrav/grav | Versions <2.0.7
Has fix
ComposerPublished 25 Jul 2026
  • M
Incorrect Implementation of Authentication AlgorithmCVE-2026-57852
Affects getgrav/grav | Versions <2.0.9
Has fix
ComposerPublished 25 Jul 2026
  • M
Improperly Controlled Sequential Memory Allocation
Affects guzzlehttp/guzzle | Versions <7.15.1
Has fix
ComposerPublished 25 Jul 2026
  • H
Incorrectly Specified Destination in a Communication Channel
Affects guzzlehttp/guzzle | Versions <7.15.1
Has fix
ComposerPublished 25 Jul 2026
  • H
Improper Removal of Sensitive Information Before Storage or Transfer
Affects guzzlehttp/guzzle | Versions <7.15.1
Has fix
ComposerPublished 25 Jul 2026
  • M
Insufficiently Protected Credentials
Affects guzzlehttp/guzzle | Versions <7.14.2
Has fix
ComposerPublished 25 Jul 2026
  • H
Directory TraversalCVE-2026-65694
Affects microweber/microweber | Versions >=0.0.0
Has fix
ComposerPublished 25 Jul 2026