Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Insufficient Type Distinction
CVE-2026-15305
Affects
typo3/cms-form
| Versions
>=14.2.0, <14.3.5
H
Cross-site Scripting (XSS)
CVE-2026-48118
Affects
nukeviet/nukeviet
| Versions
<4.5.09
H
Cross-site Scripting (XSS)
CVE-2026-49259
Affects
nukeviet/nukeviet
| Versions
<4.5.09
M
Server-side Request Forgery (SSRF)
CVE-2026-55372
Affects
nukeviet/nukeviet
| Versions
<4.5.09
M
Server-side Request Forgery (SSRF)
CVE-2026-49969
Affects
plank/laravel-mediable
| Versions
<7.0.0
H
Directory Traversal
CVE-2026-49970
Affects
plank/laravel-mediable
| Versions
<7.0.0
H
Arbitrary File Upload
CVE-2026-49972
Affects
plank/laravel-mediable
| Versions
<7.0.0
M
Cross-site Scripting (XSS)
CVE-2026-49971
Affects
plank/laravel-mediable
| Versions
<7.0.0
C
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-54159
Affects
prestashop/ps_facetedsearch
| Versions
>=3.0.0, <4.0.4
H
Authorization Bypass Through User-Controlled Key
CVE-2026-61460
Affects
krayin/laravel-crm
| Versions
>=0.0.0
H
Arbitrary File Upload
Affects
notrinos/notrinos-erp
| Versions
>=0.0.0
M
Server-side Request Forgery (SSRF)
CVE-2026-49865
Affects
kimai/kimai
| Versions
<2.58.0
H
Server-side Request Forgery (SSRF)
CVE-2026-55807
Affects
drupal/core
| Versions
<10.5.12
>=10.6.0, <10.6.11
>=11.0.0, <11.2.14
>=11.3.0, <11.3.12
M
Cross-site Scripting (XSS)
CVE-2026-55808
Affects
drupal/core
| Versions
<10.5.12
>=10.6.0, <10.6.11
>=11.0.0, <11.2.14
>=11.3.0, <11.3.12
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-55804
Affects
drupal/core
| Versions
<10.5.12
>=10.6.0, <10.6.11
>=11.0.0, <11.2.14
>=11.3.0, <11.3.12
C
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-55803
Affects
drupal/core
| Versions
<10.5.12
>=10.6.0, <10.6.11
>=11.0.0, <11.2.14
>=11.3.0, <11.3.12
M
Open Redirect
CVE-2026-55806
Affects
drupal/core
| Versions
<10.5.12
>=10.6.0, <10.6.11
>=11.0.0, <11.2.14
>=11.3.0, <11.3.12
M
Open Redirect
CVE-2026-55461
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Cross-site Scripting (XSS)
CVE-2026-55481
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Incorrect Authorization
CVE-2026-55475
Affects
snipe/snipe-it
| Versions
<8.6.1
M
Incorrect Authorization
CVE-2026-55479
Affects
snipe/snipe-it
| Versions
<8.6.2
H
Incorrect Authorization
CVE-2026-55460
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Missing Authorization
CVE-2026-55476
Affects
snipe/snipe-it
| Versions
<8.6.0
H
Directory Traversal
CVE-2026-55469
Affects
snipe/snipe-it
| Versions
<8.6.2
M
CSV Injection
CVE-2026-55452
Affects
snipe/snipe-it
| Versions
<8.5.0
M
Authorization Bypass Through User-Controlled Key
CVE-2026-55515
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Cross-site Scripting (XSS)
CVE-2026-55466
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Incorrect Authorization
CVE-2026-55462
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Cross-site Scripting (XSS)
CVE-2026-55464
Affects
snipe/snipe-it
| Versions
<8.6.2
M
Incorrect Authorization
CVE-2026-55472
Affects
snipe/snipe-it
| Versions
<8.6.2