VulnScope
Package-centric vulnerability lookup. Type a package name or CVE ID above, or click a card.
- CVE-2026-58644Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-25089Fortinet FortiSandbox OS Command Injection Vulnerability
- CVE-2026-39808Fortinet FortiSandbox OS Command Injection Vulnerability
- CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability
- CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
- Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
📰 Recently published
- —(no summary)
- —(no summary)
- LOW3.7body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
- —@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect
- —Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
- MEDIUM4.3@astrojs/rss: XML Injection via Unescaped RSS Feed Fields
- —
Most-vulnerable packages
Debian
- 364161🚨
- 69538🚨
- 33236🚨
- 1520430🚨
- 9311🚨
- 9789🚨
- 9288🚨
- 34556🚨