Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8416
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Sensitive Cookie with Improper SameSite AttributeCVE-2026-8413
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Improper Privilege ManagementCVE-2026-8327
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8411
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8409
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Server-side Request Forgery (SSRF)CVE-2026-7890
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8435
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8140
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-8135
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Information ExposureCVE-2026-6826
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8417
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-7882
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Scripting (XSS)CVE-2026-8197
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Missing AuthorizationCVE-2026-7879
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8428
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8421
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-7886
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8412
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8415
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8433
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Missing AuthorizationCVE-2026-8238
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • C
Relative Path TraversalCVE-2026-8134
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Use of Weak HashCVE-2026-48488
Affects thorsten/phpmyfaq | Versions <4.1.4
Has fix
ComposerPublished 27 Jun 2026
  • M
Use of Weak HashCVE-2026-48488
Affects phpmyfaq/phpmyfaq | Versions <4.1.4
Has fix
ComposerPublished 27 Jun 2026
  • M
Improper AuthenticationCVE-2026-44584
Affects paymenter/paymenter | Versions <1.5.0
Has fix
ComposerPublished 27 Jun 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-44583
Affects paymenter/paymenter | Versions <1.5.0
Has fix
ComposerPublished 27 Jun 2026
  • M
Missing AuthorizationCVE-2026-44585
Affects paymenter/paymenter | Versions <1.5.0
Has fix
ComposerPublished 27 Jun 2026
  • H
Arbitrary File UploadCVE-2025-58048
Affects paymenter/paymenter | Versions <1.2.11
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Scripting (XSS)CVE-2026-55692
Affects starcitizenwiki/embedvideo | Versions <4.1.0
Has fix
ComposerPublished 27 Jun 2026
  • C
Origin Validation ErrorCVE-2026-55791
Affects craftcms/cms | Versions >=4.0.0-RC1, <4.18>=5.0.0-RC1, <5.10
Has fix
ComposerPublished 27 Jun 2026