Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Missing Authorization
CVE-2026-57286
Affects
org.jenkins-ci.plugins:git-parameter
| Versions
[,462.463.v496a_59f698e5)
H
Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-57287
Affects
org.jenkins-ci.plugins:jobconfighistory
| Versions
[,1367.vc8fa_b_15101dc)
H
XML External Entity (XXE) Injection
CVE-2026-57303
Affects
org.jenkins-ci.plugins:assembla
| Versions
[0,]
H
Improper Certificate Validation
CVE-2026-57289
Affects
io.jenkins.plugins:bitbucket-push-and-pull-request
| Versions
[,3.3.9)
M
Cross-site Request Forgery (CSRF)
CVE-2026-57306
Affects
org.jenkins-ci.plugins:zdevops
| Versions
[0,]
M
Open Redirect
CVE-2026-53440
Affects
org.jenkins-ci.main:jenkins-core
| Versions
[,2.555.3)
[2.500,2.568)
M
Missing Encryption of Sensitive Data
CVE-2026-53442
Affects
org.jenkins-ci.main:jenkins-core
| Versions
[,2.555.3)
[2.500,2.568)
C
Deserialization of Untrusted Data
CVE-2026-53435
Affects
org.jenkins-ci.main:jenkins-core
| Versions
[,2.555.3)
[2.500,2.568)
M
Open Redirect
CVE-2026-53436
Affects
org.jenkins-ci.main:jenkins-core
| Versions
[,2.555.3)
[2.500,2.568)
M
Open Redirect
CVE-2026-53437
Affects
org.jenkins-ci.main:jenkins-core
| Versions
[,2.555.3)
[2.500,2.568)
M
Missing Authorization
CVE-2026-57954
Affects
com.yahoo.elide:elide-core
| Versions
[0,]
M
Missing Authorization
CVE-2026-57954
Affects
com.yahoo.elide:elide-graphql
| Versions
[0,]
M
Cross-site Scripting (XSS)
CVE-2026-37216
Affects
com.ruoyi:ruoyi-admin
| Versions
[0,]
M
Cross-site Scripting (XSS)
CVE-2026-37216
Affects
com.ruoyi:ruoyi
| Versions
[0,]
H
Sensitive Cookie Without "HttpOnly" Flag
CVE-2026-57948
Affects
com.navercorp.pinpoint:pinpoint-web
| Versions
[0,]
H
Sensitive Cookie Without "HttpOnly" Flag
CVE-2026-57948
Affects
com.navercorp.pinpoint:pinpoint-basic-login
| Versions
[0,]
M
Server-side Request Forgery (SSRF)
CVE-2026-57947
Affects
com.navercorp.pinpoint:pinpoint-webhook
| Versions
[0,]
M
Server-side Request Forgery (SSRF)
CVE-2026-57947
Affects
com.navercorp.pinpoint:pinpoint-batch-alarmsender
| Versions
[0,]
H
Deserialization of Untrusted Data
CVE-2026-48919
Affects
org.jenkins-ci.plugins:active-directory
| Versions
[,2.41.1)
M
Improper Input Validation
CVE-2026-9497
Affects
org.mengyun:tcc-transaction
| Versions
[0,]
L
Improper Verification of Cryptographic Signature
CVE-2026-48791
Affects
dev.sigstore:sigstore-java
| Versions
[,2.1.0)
M
Arbitrary Code Injection
CVE-2026-13500
Affects
org.antlr:antlr4
| Versions
[0,]
M
Arbitrary Command Injection
CVE-2026-13501
Affects
org.antlr:antlr4
| Versions
[0,]
L
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-13502
Affects
org.antlr:antlr4-maven-plugin
| Versions
[0,]
M
Directory Traversal
CVE-2026-13503
Affects
org.antlr:antlr4
| Versions
[0,]
H
Improper Authorization
CVE-2026-49877
Affects
org.apache.activemq:apache-activemq
| Versions
[,5.19.8)
[6.0.0,6.2.7)
M
Incorrect Calculation of Buffer Size
CVE-2026-49432
Affects
org.apache.activemq:apache-activemq
| Versions
[,5.19.8)
[6.0.0,6.2.7)
M
Incorrect Calculation of Buffer Size
CVE-2026-49432
Affects
org.apache.activemq:activemq-stomp
| Versions
[,5.19.8)
[6.0.0,6.2.7)
M
Incorrect Calculation of Buffer Size
CVE-2026-49432
Affects
org.apache.activemq:activemq-all
| Versions
[,5.19.8)
[6.0.0,6.2.7)
M
External Control of System or Configuration Setting
CVE-2026-49434
Affects
org.apache.activemq:apache-activemq
| Versions
[,5.19.8)
[6.0.0,6.2.7)