Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Incorrect Permission Assignment for Critical Resource
Affects
xmo/mine-core
| Versions
>=0.0.0
M
PHP Remote File Inclusion
Affects
fof/pretty-mail
| Versions
>=0.0.0
H
Improper Neutralization of Special Elements Used in a Template Engine
Affects
fof/pretty-mail
| Versions
>=0.0.0
M
Cross-site Scripting (XSS)
Affects
johnpbloch/wordpress-core
| Versions
<4.7.31
>=4.8.0, <4.8.27
>=4.9.0, <4.9.28
>=5.0.0, <5.0.24
>=5.1.0, <5.1.21
>=5.2.0, <5.2.23
>=5.3.0, <5.3.20
>=5.4.0, <5.4.18
>=5.5.0, <5.5.17
>=5.6.0, <5.6.16
>=5.7.0, <5.7.14
>=5.8.0, <5.8.12
>=5.9.0, <5.9.12
>=6.0.0, <6.0.11
>=6.1.0, <6.1.9
>=6.2.0, <6.2.8
>=6.3.0, <6.3.7
>=6.4.0, <6.4.7
>=6.5.0, <6.5.7
>=6.6.0, <6.6.4
>=6.7.0, <6.7.4
>=6.8.0, <6.8.3
M
Missing Authorization
Affects
azuracast/azuracast
| Versions
<0.23.2
M
Insertion of Sensitive Information Into Sent Data
Affects
johnpbloch/wordpress-core
| Versions
>=4.7.0, <4.7.31
>=4.8.0, <4.8.27
>=4.9.0, <4.9.28
>=5.0.0, <5.0.24
>=5.1.0, <5.1.21
>=5.2.0, <5.2.23
>=5.3.0, <5.3.20
>=5.4.0, <5.4.18
>=5.5.0, <5.5.17
>=5.6.0, <5.6.16
>=5.7.0, <5.7.14
>=5.8.0, <5.8.12
>=5.9.0, <5.9.12
>=6.0.0, <6.0.11
>=6.1.0, <6.1.9
>=6.2.0, <6.2.8
>=6.3.0, <6.3.7
>=6.4.0, <6.4.7
>=6.5.0, <6.5.7
>=6.6.0, <6.6.4
>=6.7.0, <6.7.4
>=6.8.0, <6.8.3
H
Arbitrary File Upload
Affects
dotclear/dotclear
| Versions
<2.31
H
Uncaught Exception
Affects
robrichards/xmlseclibs
| Versions
<3.1.4
H
Arbitrary File Upload
Affects
apprain/apprain
| Versions
>=0.0.0
C
Unverified Password Change
Affects
ibexa/user
| Versions
>=5.0.0-beta1, <5.0.4
C
Authentication Bypass Using an Alternate Path or Channel
Affects
filament/filament
| Versions
>=4.0.0, <4.3.1
H
Cross-site Scripting (XSS)
Affects
shopware/storefront
| Versions
>=6.4.6.0, <6.6.10.10
>=6.7.0.0, <6.7.5.1
H
Arbitrary Code Injection
Affects
neuron-core/neuron-ai
| Versions
>=2.8.11, <2.8.12
H
Execution with Unnecessary Privileges
Affects
neuron-core/neuron-ai
| Versions
>=2.8.11, <2.8.12
M
Cross-site Scripting (XSS)
Affects
getgrav/grav
| Versions
>=0.0.0
H
Directory Traversal
Affects
alexusmai/laravel-file-manager
| Versions
<3.3.2
M
Cross-site Scripting (XSS)
Affects
snipe/snipe-it
| Versions
<8.3.4
H
Directory Traversal
Affects
alexusmai/laravel-file-manager
| Versions
>=2.0.0, <3.3.2
H
Arbitrary Command Injection
Affects
feehi/cms
| Versions
>=0.0.1
H
Arbitrary File Upload
Affects
mautic/core-lib
| Versions
>=4.0.0-alpha1, <4.4.18
>=5.0.0-alpha, <5.2.9
>=6.0.0-alpha, <6.0.7
H
Arbitrary File Upload
Affects
mautic/core
| Versions
>=4.0.0-alpha1, <4.4.18
>=5.0.0-alpha, <5.2.9
>=6.0.0-alpha, <6.0.7
C
Access Control Bypass
Affects
mautic/core-lib
| Versions
>=4.0.0-alpha1, <4.4.18
>=5.0.0-alpha, <5.2.9
>=6.0.0-alpha, <6.0.7
C
Access Control Bypass
Affects
mautic/core
| Versions
>=4.0.0-alpha1, <4.4.18
>=5.0.0-alpha, <5.2.9
>=6.0.0-alpha, <6.0.7
H
Unsafe Dependency Resolution
Affects
dcat/laravel-admin
| Versions
>=0.1.0
H
Cross-site Scripting (XSS)
Affects
aimeos/ai-cms-grapesjs
| Versions
>=2022.4.1, <2022.10.9
>=2023.4.1, <2023.10.15
>=2024.4.1, <2024.10.8
>=2025.4.1, <2025.10.2
M
Improper Restriction of Rendered UI Layers or Frames
Affects
feehi/cms
| Versions
>=0.0.1
M
Authorization Bypass Through User-Controlled Key
Affects
feehi/cms
| Versions
>=0.0.1
M
Cross-site Scripting (XSS)
Affects
feehi/cms
| Versions
>=0.0.1
H
Improper Authorization
Affects
getgrav/grav
| Versions
<1.8.0-beta.27
H
Improper Neutralization of Special Elements Used in a Template Engine
Affects
getgrav/grav
| Versions
<1.8.0-beta.27