Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
L
Directory Traversal
CVE-2026-55825
Affects
contao/core-bundle
| Versions
>=5.7.0, <5.7.7
C
Insecure Default Initialization of Resource
CVE-2026-52824
Affects
kimai/kimai
| Versions
<2.58.0
H
Improper Authentication
CVE-2026-52827
Affects
kimai/kimai
| Versions
<2.59.0
M
Cross-site Request Forgery (CSRF)
CVE-2026-52823
Affects
kimai/kimai
| Versions
<2.58.0
M
Missing Authorization
CVE-2026-52821
Affects
kimai/kimai
| Versions
<2.57.0
M
Missing Authorization
CVE-2026-52825
Affects
kimai/kimai
| Versions
<2.58.0
M
Authorization Bypass Through User-Controlled Key
CVE-2026-52826
Affects
kimai/kimai
| Versions
<2.57.0
M
Missing Authorization
CVE-2026-52828
Affects
kimai/kimai
| Versions
<2.58.0
M
Missing Authorization
CVE-2026-52822
Affects
kimai/kimai
| Versions
<2.58.0
M
Authorization Bypass Through User-Controlled Key
CVE-2026-52820
Affects
kimai/kimai
| Versions
<2.57.0
M
Incorrect Authorization
CVE-2026-52819
Affects
kimai/kimai
| Versions
<2.57.0
M
Cross-site Request Forgery (CSRF)
CVE-2026-49992
Affects
kimai/kimai
| Versions
<2.58.0
C
Improper Authentication
CVE-2026-47677
Affects
facturascripts/facturascripts
| Versions
<2026.3
H
Cross-site Scripting (XSS)
CVE-2026-54064
Affects
nukeviet/nukeviet
| Versions
<4.6.00
H
Directory Traversal
CVE-2026-54065
Affects
nukeviet/nukeviet
| Versions
<4.6.00
M
Improper Authorization
CVE-2026-15509
Affects
leantime/leantime
| Versions
>=0.0.0
M
Improper Authorization
CVE-2026-15510
Affects
leantime/leantime
| Versions
>=0.0.0
M
Arbitrary File Upload
CVE-2026-15518
Affects
area17/twill
| Versions
>=0.0.0
M
Insufficient Type Distinction
CVE-2026-15305
Affects
typo3/cms-form
| Versions
>=14.2.0, <14.3.5
H
Cross-site Scripting (XSS)
CVE-2026-48118
Affects
nukeviet/nukeviet
| Versions
<4.5.09
H
Cross-site Scripting (XSS)
CVE-2026-49259
Affects
nukeviet/nukeviet
| Versions
<4.5.09
M
Server-side Request Forgery (SSRF)
CVE-2026-55372
Affects
nukeviet/nukeviet
| Versions
<4.5.09
M
Server-side Request Forgery (SSRF)
CVE-2026-49969
Affects
plank/laravel-mediable
| Versions
<7.0.0
H
Directory Traversal
CVE-2026-49970
Affects
plank/laravel-mediable
| Versions
<7.0.0
H
Arbitrary File Upload
CVE-2026-49972
Affects
plank/laravel-mediable
| Versions
<7.0.0
M
Cross-site Scripting (XSS)
CVE-2026-49971
Affects
plank/laravel-mediable
| Versions
<7.0.0
C
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-54159
Affects
prestashop/ps_facetedsearch
| Versions
>=3.0.0, <4.0.4
H
Authorization Bypass Through User-Controlled Key
CVE-2026-61460
Affects
krayin/laravel-crm
| Versions
>=0.0.0
H
Arbitrary File Upload
Affects
notrinos/notrinos-erp
| Versions
>=0.0.0
M
Server-side Request Forgery (SSRF)
CVE-2026-49865
Affects
kimai/kimai
| Versions
<2.58.0