Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Cross-site Scripting (XSS)CVE-2026-52847
Affects mantisbt/mantisbt | Versions <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • M
Improper Input ValidationCVE-2026-52883
Affects mantisbt/mantisbt | Versions <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • C
Authorization Bypass Through User-Controlled KeyCVE-2026-47156
Affects mantisbt/mantisbt | Versions <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-62944
Affects mantisbt/mantisbt | Versions <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-52882
Affects mantisbt/mantisbt | Versions <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • C
Cross-site Scripting (XSS)CVE-2026-52881
Affects mantisbt/mantisbt | Versions <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • H
Eval InjectionCVE-2026-49273
Affects mantisbt/mantisbt | Versions >=1.3.0, <2.28.4
Has fix
ComposerPublished 15 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47998
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47995
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47999
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47996
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47984
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47994
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47988
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Open RedirectCVE-2026-48000
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • H
Improper Encoding or Escaping of OutputCVE-2026-48358
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-48371
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • H
Arbitrary File UploadCVE-2026-48356
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Information ExposureCVE-2026-48001
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-47997
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • M
SQL InjectionCVE-2026-47992
Affects magento/community-edition | Versions <2.4.6-p15>=2.4.7-beta1, <2.4.7-p10>=2.4.8-beta1, <2.4.8-p5>=2.4.9-alpha1, <2.4.9-beta1
Has fix
ComposerPublished 14 Jul 2026
  • H
Arbitrary File Upload
Affects facturascripts/facturascripts | Versions >=2025.0, <2026.3
Has fix
ComposerPublished 14 Jul 2026
  • H
CSV InjectionCVE-2026-45263
Affects facturascripts/facturascripts | Versions >=0.0.0
Has fix
ComposerPublished 14 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-45262
Affects facturascripts/facturascripts | Versions >=0.0.0
Has fix
ComposerPublished 14 Jul 2026
  • H
Directory TraversalCVE-2026-45693
Affects facturascripts/facturascripts | Versions <2026.2
Has fix
ComposerPublished 14 Jul 2026
  • H
Deserialization of Untrusted DataCVE-2026-7888
Affects concrete5/concrete5 | Versions <9.5.2
Has fix
ComposerPublished 14 Jul 2026
  • H
Use of GET Request Method With Sensitive Query StringsCVE-2026-50157
Affects auth0/symfony | Versions >=5.0.0-BETA0, <5.9.0
Has fix
ComposerPublished 14 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-45710
Affects facturascripts/facturascripts | Versions <2026.2
Has fix
ComposerPublished 14 Jul 2026
  • M
Information ExposureCVE-2026-55651
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-52841
Affects alextselegidis/easyappointments | Versions <1.6.0
Has fix
ComposerPublished 14 Jul 2026