Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Cross-site Scripting (XSS)CVE-2026-47995
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47999
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47996
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47984
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47994
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47988
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Open RedirectCVE-2026-48000
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • H
Improper Encoding or Escaping of OutputCVE-2026-48358
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-48371
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • H
Arbitrary File UploadCVE-2026-48356
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Information ExposureCVE-2026-48001
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47997
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
SQL InjectionCVE-2026-47992
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • H
Arbitrary File Upload
Affects facturascripts/facturascripts | Versions >=2025.0, <2026.3
Has fix
ComposerPublished 14 Jul 2026
  • H
CSV InjectionCVE-2026-45263
Affects facturascripts/facturascripts | Versions >=0.0.0
Has fix
ComposerPublished 14 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-45262
Affects facturascripts/facturascripts | Versions >=0.0.0
Has fix
ComposerPublished 14 Jul 2026
  • H
Directory TraversalCVE-2026-45693
Affects facturascripts/facturascripts | Versions <2026.2
Has fix
ComposerPublished 14 Jul 2026
  • H
Deserialization of Untrusted DataCVE-2026-7888
Affects concrete5/concrete5 | Versions <9.5.2
Has fix
ComposerPublished 14 Jul 2026
  • H
Use of GET Request Method With Sensitive Query StringsCVE-2026-50157
Affects auth0/symfony | Versions >=5.0.0-BETA0, <5.9.0
Has fix
ComposerPublished 14 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-45710
Affects facturascripts/facturascripts | Versions <2026.2
Has fix
ComposerPublished 14 Jul 2026
  • M
Information ExposureCVE-2026-55651
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-52841
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-52838
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-52840
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-52839
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • M
Information ExposureCVE-2026-52837
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • L
Server-side Request Forgery (SSRF)CVE-2026-57232
Affects contao/core-bundle | Versions >=5.3.35, <5.3.48>=5.4.0, <5.7.9
Has fix
ComposerPublished 14 Jul 2026
  • L
Information ExposureCVE-2026-55824
Affects contao/core-bundle | Versions >=4.13.0, <5.3.47>=5.4.0, <5.7.7
Has fix
ComposerPublished 14 Jul 2026
  • L
Directory TraversalCVE-2026-55825
Affects contao/core-bundle | Versions >=5.7.0, <5.7.7
Has fix
ComposerPublished 14 Jul 2026
  • C
Insecure Default Initialization of ResourceCVE-2026-52824
Affects kimai/kimai | Versions <2.58.0
Has fix
ComposerPublished 14 Jul 2026