Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Improper Authorization
CVE-2026-47740
Affects
shopper/framework
| Versions
<2.8.0
M
Directory Traversal
CVE-2026-12198
Affects
microweber/microweber
| Versions
>=2.0.0
M
Incorrect Authorization
CVE-2026-54244
Affects
statamic/cms
| Versions
<5.74.0
>=6.0.0, <6.20.3
L
Server-side Request Forgery (SSRF)
CVE-2026-54242
Affects
statamic/cms
| Versions
<5.73.24
>=6.0.0, <6.20.1
M
CSV Injection
CVE-2026-54243
Affects
statamic/cms
| Versions
<5.73.24
>=6.0.0, <6.20.1
M
Incorrect Authorization
CVE-2026-49288
Affects
statamic/cms
| Versions
<5.73.23
>=6.0.0, <6.20.0
L
Server-side Request Forgery (SSRF)
CVE-2026-49262
Affects
aimeos/pagible
| Versions
<0.10.4
H
Unlock of a Resource that is not Locked
CVE-2026-56396
Affects
thorsten/phpmyfaq
| Versions
<4.1.4
H
Unlock of a Resource that is not Locked
CVE-2026-56396
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.4
M
Information Exposure
Affects
pterodactyl/panel
| Versions
<1.12.3
H
HTTP Request Smuggling
CVE-2026-48979
Affects
php-standard-library/h2
| Versions
>=6.1.0, <6.1.2
>=6.2.0, <6.2.1
H
HTTP Request Smuggling
CVE-2026-48979
Affects
php-standard-library/php-standard-library
| Versions
>=6.1.0, <6.1.2
>=6.2.0, <6.2.1
H
Insertion of Sensitive Information into Log File
Affects
web-auth/webauthn-symfony-bundle
| Versions
<5.3.4
H
Missing Authorization
CVE-2026-55483
Affects
snipe/snipe-it
| Versions
<8.6.0
M
Missing Authorization
CVE-2026-55542
Affects
snipe/snipe-it
| Versions
<8.5.1
M
Improper Authorization
CVE-2026-55519
Affects
snipe/snipe-it
| Versions
<8.4.1
M
Missing Authorization
CVE-2026-50550
Affects
snipe/snipe-it
| Versions
<8.5.0
H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-54329
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Authorization Bypass Through User-Controlled Key
CVE-2026-55482
Affects
snipe/snipe-it
| Versions
<8.4.2
H
Incorrect Authorization
CVE-2026-48507
Affects
snipe/snipe-it
| Versions
<8.6.0
H
Missing Authorization
CVE-2026-48492
Affects
snipe/snipe-it
| Versions
<8.5.1
M
Allocation of Resources Without Limits or Throttling
CVE-2026-49870
Affects
snipe/snipe-it
| Versions
<8.6.0
H
Missing Authorization
CVE-2026-49205
Affects
thorsten/phpmyfaq
| Versions
<4.1.4
H
Missing Authorization
CVE-2026-49205
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.4
H
Incorrect Authorization
CVE-2026-48493
Affects
snipe/snipe-it
| Versions
<8.6.0
H
Missing Authorization
CVE-2026-49976
Affects
snipe/snipe-it
| Versions
<8.6.0
H
Improper Authentication
CVE-2026-52793
Affects
froxlor/froxlor
| Versions
<2.3.7
M
Missing Authorization
CVE-2026-8239
Affects
concrete5/concrete5
| Versions
<9.5.1
L
Cross-site Request Forgery (CSRF)
CVE-2026-8414
Affects
concrete5/concrete5
| Versions
>=9.0.0RC1, <9.5.1
L
Cross-site Request Forgery (CSRF)
CVE-2026-8432
Affects
concrete5/concrete5
| Versions
>=9.0.0RC1, <9.5.1