Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-50281
Affects
craftcms/cms
| Versions
>=5.7.0, <5.9.21
H
Improper Certificate Validation
CVE-2026-49283
Affects
simplesamlphp/saml2
| Versions
<4.20.2
>=5.0.0, <5.0.6
>=6.0.0, <6.2.1
H
Improper Certificate Validation
CVE-2026-49283
Affects
simplesamlphp/saml2-legacy
| Versions
<4.20.2
H
Insufficient Verification of Data Authenticity
CVE-2026-49284
Affects
simplesamlphp/simplesamlphp
| Versions
<2.4.7
>=2.5.0, <2.5.2
H
Improper Neutralization of Data within XPath Expressions ('XPath Injection')
CVE-2026-49289
Affects
simplesamlphp/saml2
| Versions
<4.20.3
H
Improper Neutralization of Data within XPath Expressions ('XPath Injection')
CVE-2026-49289
Affects
simplesamlphp/saml2-legacy
| Versions
<4.20.3
M
Authorization Bypass Through User-Controlled Key
Affects
froxlor/froxlor
| Versions
<2.3.7
M
Improper Authorization
Affects
froxlor/froxlor
| Versions
<2.3.7
H
Missing Authorization
CVE-2026-50284
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.17.15
>=5.0.0-RC1, <5.9.22
M
Access Control Bypass
CVE-2026-50280
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.9.21
M
Authorization Bypass Through User-Controlled Key
CVE-2026-50283
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.17.14
>=5.0.0-RC1, <5.9.21
H
Improper Authorization
CVE-2026-50279
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.9.21
H
Cross-site Scripting (XSS)
CVE-2026-52854
Affects
mediawiki/maps
| Versions
<12.1.3
H
Use of Cache Containing Sensitive Information
CVE-2026-49858
Affects
api-platform/json-api
| Versions
>=4.0.0-alpha.1, <4.1.29
>=4.2.0-alpha.1, <4.2.25
>=4.3.0-alpha.1, <4.3.8
H
Use of Cache Containing Sensitive Information
CVE-2026-49858
Affects
api-platform/hal
| Versions
>=4.0.0-alpha.1, <4.1.29
>=4.2.0-alpha.1, <4.2.25
>=4.3.0-alpha.1, <4.3.8
H
Use of Cache Containing Sensitive Information
CVE-2026-49858
Affects
api-platform/core
| Versions
>=2.6.0-alpha.1, <4.1.29
>=4.2.0-alpha.1, <4.2.25
>=4.3.0-alpha.1, <4.3.8
H
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-54164
Affects
api-platform/core
| Versions
<4.1.30
>=4.2.0-alpha.1, <4.2.26
>=4.3.0-alpha.1, <4.3.12
M
SQL Injection
CVE-2026-14363
Affects
mediawiki/cargo
| Versions
<3.9.1
M
Cross-site Scripting (XSS)
CVE-2026-54720
Affects
silverstripe/framework
| Versions
<6.2.2
H
Directory Traversal
CVE-2026-58451
Affects
horde/imp
| Versions
<7.0.1
M
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-80196
Affects
kimai/kimai
| Versions
<2.58.0
H
Incorrect Authorization
CVE-2026-49981
Affects
twig/twig
| Versions
<3.27.0
M
Cross-site Request Forgery (CSRF)
CVE-2026-58518
Affects
samwilson/redirectmanager
| Versions
<1.3.3
M
Cross-site Scripting (XSS)
CVE-2026-58519
Affects
mediawiki/cargo
| Versions
<3.9.1
H
Improper Privilege Management
CVE-2026-57995
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.5
H
Improper Privilege Management
CVE-2026-57995
Affects
thorsten/phpmyfaq
| Versions
<4.1.5
M
Race Condition
CVE-2026-55219
Affects
paymenter/paymenter
| Versions
<1.5.5
H
Authorization Bypass Through User-Controlled Key
CVE-2026-47198
Affects
paymenter/paymenter
| Versions
<1.5.1
L
Authorization Bypass Through User-Controlled Key
CVE-2026-8347
Affects
concrete5/concrete5
| Versions
<9.5.1
L
Cross-site Request Forgery (CSRF)
CVE-2026-8340
Affects
concrete5/concrete5
| Versions
<9.5.1