Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
SQL Injection
CVE-2026-38739
Affects
ezsystems/ezpublish-legacy
| Versions
>=0.0.0
H
SQL Injection
CVE-2026-44741
Affects
pimcore/admin-ui-classic-bundle
| Versions
<2.3.6
H
Server-side Request Forgery (SSRF)
CVE-2026-47260
Affects
phanan/koel
| Versions
<9.3.5
L
Allocation of Resources Without Limits or Throttling
CVE-2026-35202
Affects
pterodactyl/panel
| Versions
<1.12.3
M
Incorrect Authorization
CVE-2026-45703
Affects
pimcore/pimcore
| Versions
<12.3.7
H
Incorrect Authorization
CVE-2026-45704
Affects
pimcore/pimcore
| Versions
<12.3.6
H
Missing Authorization
CVE-2026-45260
Affects
pimcore/pimcore
| Versions
<12.3.7
H
Deserialization of Untrusted Data
CVE-2026-45162
Affects
pimcore/pimcore
| Versions
<12.3.7
H
SQL Injection
CVE-2026-44739
Affects
pimcore/pimcore
| Versions
<12.3.6
H
Symlink Attack
CVE-2026-41236
Affects
froxlor/froxlor
| Versions
>=2.3.6, <2.3.7
H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-41237
Affects
froxlor/froxlor
| Versions
<2.3.7
H
Incorrect Authorization
CVE-2026-41235
Affects
froxlor/froxlor
| Versions
>=2.3.6, <2.3.7
H
SQL Injection
CVE-2026-39229
Affects
bolt/bolt
| Versions
>=0.0.0
H
Missing Authentication for Critical Function
CVE-2026-45332
Affects
automad/automad
| Versions
>=2.0.0-alpha.1, <2.0.0-beta.28
H
Sequence of Processor Instructions Leads to Unexpected Behavior
CVE-2026-47233
Affects
admidio/admidio
| Versions
<5.0.10
H
Incorrect Authorization
CVE-2026-47230
Affects
admidio/admidio
| Versions
<5.0.10
M
Cross-site Request Forgery (CSRF)
CVE-2026-47229
Affects
admidio/admidio
| Versions
<5.0.10
M
Insertion of Sensitive Information into Log File
CVE-2026-47234
Affects
admidio/admidio
| Versions
<5.0.10
M
Cross-site Request Forgery (CSRF)
CVE-2026-47232
Affects
admidio/admidio
| Versions
<5.0.10
H
Incorrect Authorization
CVE-2026-47231
Affects
admidio/admidio
| Versions
<5.0.10
H
Missing Authorization
CVE-2026-47226
Affects
admidio/admidio
| Versions
<5.0.10
H
Incorrect Authorization
CVE-2026-47227
Affects
admidio/admidio
| Versions
<5.0.10
M
Cross-site Request Forgery (CSRF)
CVE-2026-47228
Affects
admidio/admidio
| Versions
<5.0.10
H
Cross-site Scripting (XSS)
CVE-2026-45368
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
M
Missing Authorization
CVE-2026-45334
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
H
Cross-site Scripting (XSS)
CVE-2026-44175
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
M
Missing Authorization
CVE-2026-44176
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-44174
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
H
PHP Remote File Inclusion
CVE-2026-44177
Affects
getkirby/cms
| Versions
>=5.3.0, <5.4.1
M
Authorization Bypass Through User-Controlled Key
CVE-2026-47266
Affects
verbb/formie
| Versions
<2.2.21
>=3.0.0-beta.1, <3.1.26