Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Authorization Bypass Through User-Controlled KeyCVE-2026-35445
Affects winter/wn-backend-module | Versions <1.2.13
Has fix
ComposerPublished 12 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-45694
Affects librenms/librenms | Versions <26.5.0
Has fix
ComposerPublished 12 Aug 2026
- M
SQL InjectionCVE-2026-47132
Affects phpmyfaq/phpmyfaq | Versions <4.2.0-alpha
Has fix
ComposerPublished 12 Aug 2026
- M
SQL InjectionCVE-2026-47132
Affects thorsten/phpmyfaq | Versions <4.2.0-alpha
Has fix
ComposerPublished 12 Aug 2026
- M
UNIX Symbolic Link (Symlink) FollowingCVE-2026-62992
Affects smarty/smarty | Versions <4.5.7>=5.0.0, <5.8.2
Has fix
ComposerPublished 12 Aug 2026
- H
Origin Validation ErrorCVE-2026-19418
Affects typo3/cms-install | Versions >=13.0.0, <13.4.34>=14.0.0, <14.3.6
Has fix
ComposerPublished 11 Aug 2026
- H
Origin Validation ErrorCVE-2026-19418
Affects typo3/cms-core | Versions >=13.0.0, <13.4.34>=14.0.0, <14.3.6
Has fix
ComposerPublished 11 Aug 2026
- H
Origin Validation ErrorCVE-2026-19418
Affects typo3/cms-backend | Versions >=13.0.0, <13.4.34>=14.0.0, <14.3.6
Has fix
ComposerPublished 11 Aug 2026
- C
Use of a Key Past its Expiration DateCVE-2026-39923
Affects flarum/framework | Versions <1.8.16
Has fix
ComposerPublished 9 Aug 2026
- H
Insufficient Session ExpirationCVE-2026-39924
Affects flarum/framework | Versions <1.8.16
Has fix
ComposerPublished 9 Aug 2026
- M
CSV InjectionCVE-2026-18738
Affects shlinkio/shlink | Versions >=5.0.0
Has fix
ComposerPublished 9 Aug 2026
- H
SQL InjectionCVE-2026-18737
Affects shlinkio/shlink | Versions >=3.3.1
Has fix
ComposerPublished 9 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-67617
Affects microweber/microweber | Versions >=0.0.0
Has fix
ComposerPublished 9 Aug 2026
- M
Incorrect Implementation of Authentication AlgorithmCVE-2026-11430
Affects getgrav/grav | Versions <2.0.9
Has fix
ComposerPublished 9 Aug 2026
- M
Incomplete Denylist to Cross-Site ScriptingCVE-2026-71478
Affects league/commonmark | Versions >=1.5.0, <2.9.0
Has fix
ComposerPublished 9 Aug 2026
Affects league/commonmark | Versions >=2.0.0, <2.9.0
Has fix
ComposerPublished 9 Aug 2026
- M
Directory TraversalCVE-2026-62996
Affects smarty/smarty | Versions >=5.0.0, <5.8.4
Has fix
ComposerPublished 9 Aug 2026
- H
SQL InjectionCVE-2026-41453
Affects krayin/laravel-crm | Versions <2.2.4
Has fix
ComposerPublished 9 Aug 2026
- M
Use of Less Trusted SourceCVE-2026-63220
Affects codeigniter4/framework | Versions <4.7.4
Has fix
ComposerPublished 9 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-54717
Affects silverstripe/cms | Versions <6.2.1
Has fix
ComposerPublished 9 Aug 2026
- H
Directory TraversalCVE-2026-69089
Affects getgrav/grav | Versions <2.0.11
Has fix
ComposerPublished 9 Aug 2026
- H
Arbitrary Code InjectionCVE-2026-69088
Affects getgrav/grav | Versions >=2.0.7, <2.0.11
Has fix
ComposerPublished 9 Aug 2026
Affects league/commonmark | Versions >=2.0.0, <2.9.0
Has fix
ComposerPublished 9 Aug 2026
- H
Inefficient Algorithmic ComplexityCVE-2026-86435
Affects league/commonmark | Versions >=1.5.0, <2.9.0
Has fix
ComposerPublished 9 Aug 2026
- H
Excessive Platform Resource Consumption within a LoopCVE-2026-71488
Affects league/commonmark | Versions >=0.6.0, <2.9.0
Has fix
ComposerPublished 9 Aug 2026
Affects league/commonmark | Versions >=1.5.0, <2.9.0
Has fix
ComposerPublished 9 Aug 2026
Affects getkirby/cms | Versions <4.9.5>=5.0.0-alpha.1, <5.5.2
Has fix
ComposerPublished 9 Aug 2026
- M
Missing AuthorizationCVE-2026-64664
Affects statamic/cms | Versions <5.74.1>=6.0.0, <6.24.0
Has fix
ComposerPublished 7 Aug 2026
- M
Arbitrary File UploadCVE-2026-71434
Affects statamic/cms | Versions <5.74.3>=6.0.0, <6.24.2
Has fix
ComposerPublished 7 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-71435
Affects statamic/cms | Versions <5.74.3>=6.0.0, <6.24.2
Has fix
ComposerPublished 7 Aug 2026