Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Cross-site Scripting (XSS)CVE-2026-34686
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9
Has fix
ComposerPublished 14 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-34658
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9
Has fix
ComposerPublished 14 May 2026
- H
Dependency on Vulnerable Third-Party ComponentCVE-2026-34652
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9
Has fix
ComposerPublished 14 May 2026
- M
Out-of-bounds ReadCVE-2026-34685
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9
Has fix
ComposerPublished 14 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-40598
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-41897
Affects mantisbt/mantisbt | Versions >=1.0.0, <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Information ExposureCVE-2026-34744
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Information ExposureCVE-2026-34970
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Insertion of Sensitive Information Into Sent DataCVE-2026-34579
Affects mantisbt/mantisbt | Versions >=2.26.1, <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Access Control BypassCVE-2026-34754
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Missing AuthorizationCVE-2026-42071
Affects mantisbt/mantisbt | Versions >=2.23.0, <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Cross-site Scripting (XSS)CVE-2026-34463
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Incorrect AuthorizationCVE-2026-42070
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-39960
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Access Control BypassCVE-2026-34390
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Cross-site Scripting (XSS)CVE-2026-44655
Affects mantisbt/mantisbt | Versions >=1.3.0, <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Cross-site Scripting (XSS)CVE-2026-40607
Affects mantisbt/mantisbt | Versions >=2.1.0, <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Cross-site Scripting (XSS)CVE-2026-44657
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Improperly Implemented Security Check for StandardCVE-2026-40597
Affects mantisbt/mantisbt | Versions <2.28.2
Has fix
ComposerPublished 12 May 2026
- H
Cross-site Scripting (XSS)CVE-2026-40596
Affects mantisbt/mantisbt | Versions >=2.11.0, <2.28.2
Has fix
ComposerPublished 12 May 2026
- M
Authorization Bypass Through User-Controlled KeyCVE-2026-33052
Affects mantisbt/mantisbt | Versions >=2.28.0, <2.28.2
Has fix
ComposerPublished 12 May 2026
Affects torrentpier/torrentpier | Versions <2.4.4
Has fix
ComposerPublished 12 May 2026
- C
PHP Remote File InclusionCVE-2026-39850
Affects yiisoft/yii2 | Versions <2.0.55
Has fix
ComposerPublished 12 May 2026
- L
Open RedirectCVE-2026-34094
Affects mediawiki/core | Versions >=1.0.0, <1.43.7>=1.44.0-rc.0, <1.44.4>=1.45.0-rc.0, <1.45.2
Has fix
ComposerPublished 12 May 2026
- L
Information ExposureCVE-2026-34092
Affects mediawiki/core | Versions <1.43.7>=1.44.0-rc.0, <1.44.4>=1.45.0-rc.0, <1.45.2
Has fix
ComposerPublished 12 May 2026
- H
Arbitrary Code InjectionCVE-2026-44738
Affects getgrav/grav | Versions <2.0.0-rc.2
Has fix
ComposerPublished 12 May 2026
- H
SQL InjectionCVE-2026-44521
Affects studio-42/elfinder | Versions <2.1.68
Has fix
ComposerPublished 12 May 2026
- H
Arbitrary Code InjectionCVE-2021-47939
Affects evolutioncms/evolution | Versions >=3.1.6
Has fix
ComposerPublished 10 May 2026
- C
User ImpersonationCVE-2021-47923
Affects opencart/opencart | Versions >=3.0.3.8
Has fix
ComposerPublished 10 May 2026
- M
Cross-site Request Forgery (CSRF)CVE-2021-47946
Affects opencart/opencart | Versions >=3.0.3.6
Has fix
ComposerPublished 10 May 2026