Apple
tvOS 27
154CVEs
216Credits
1Claimed
215 lines open to claim
Claim yours →
Security releases
Where credit is recorded in public
138 releasesVendors name researchers in their own advisories and release notes. Verifiable ground truth that needs no platform's permission. Find your line and claim it: it is yours immediately, and it is durable standing on your profile even for vendors that run no bounty platform at all. Every credit carries a BugRater ID you can quote, CVE or not.
Apple
macOS Sequoia 15.8
301CVEs
323Credits
0Claimed
323 lines open to claim
Claim yours →
Apple
macOS Tahoe 26.7
299CVEs
315Credits
0Claimed
315 lines open to claim
Claim yours →
Apple
macOS Golden Gate 27
385CVEs
555Credits
1Claimed
554 lines open to claim
Claim yours →
Apple
iOS 26.7 and iPadOS 26.7
144CVEs
170Credits
0Claimed
170 lines open to claim
Claim yours →
Apple
iOS 27 and iPadOS 27
227CVEs
378Credits
1Claimed
377 lines open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop: 152.0.7977.82/.83
10CVEs
10Credits
0Claimed
10 lines open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop
330CVEs
330Credits
0Claimed
330 lines open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop: 151.0.7922.173/.174
7CVEs
7Credits
0Claimed
7 lines open to claim
Claim yours →
Drupal
Link content parser - Critical - Unsupported - SA-CONTRIB-2026-101
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Drupal
Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop: 151.0.7922.169/.170
16CVEs
16Credits
0Claimed
16 lines open to claim
Claim yours →
Apple
Safari 26.6.1
29CVEs
30Credits
0Claimed
30 lines open to claim
Claim yours →
GitLab
GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
Apple
macOS Tahoe 26.6.2
42CVEs
45Credits
0Claimed
45 lines open to claim
Claim yours →
Apple
iOS 18.7.10 and iPadOS 18.7.10
207CVEs
224Credits
0Claimed
224 lines open to claim
Claim yours →
Apple
iOS 26.6.1 and iPadOS 26.6.1
46CVEs
49Credits
0Claimed
49 lines open to claim
Claim yours →
Drupal
Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097
3CVEs
3Credits
0Claimed
3 lines open to claim
Claim yours →
Drupal
External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
Drupal
Quick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
GitLab
GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6
12CVEs
12Credits
0Claimed
12 lines open to claim
Claim yours →
Zoom
ZSB-26018: Zoom VDI - Path Traversal
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26015: Zoom Clients - Buffer Over-write
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26016: Zoom Clients - Buffer Over-read
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26017: Zoom Clients - Use After Free
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop — 151.0.7922.137/.138
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop — 151.0.7922.108/.109
43CVEs
43Credits
0Claimed
43 lines open to claim
Claim yours →
Microsoft
August 2026 Early Security Updates
724CVEs
724Credits
0Claimed
724 lines open to claim
Claim yours →
Apple
macOS Sonoma 14.8.9
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Apple
macOS Sequoia 15.7.9
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Apple
macOS Tahoe 26.6.1
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Drupal
Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
Drupal
Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094
3CVEs
3Credits
0Claimed
3 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-08-05
24CVEs
27Credits
0Claimed
27 lines open to claim
Claim yours →
Drupal
Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 19.2.1, 19.1.3, 19.0.5
8CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop — 151.0.7922.71/.72
372CVEs
372Credits
1Claimed
371 lines open to claim
Claim yours →
Apple
Safari 26.6
20CVEs
49Credits
0Claimed
49 lines open to claim
Claim yours →
Apple
visionOS 26.6
207CVEs
250Credits
0Claimed
250 lines open to claim
Claim yours →
Apple
watchOS 26.6
218CVEs
248Credits
0Claimed
248 lines open to claim
Claim yours →
Apple
tvOS 26.6
203CVEs
246Credits
0Claimed
246 lines open to claim
Claim yours →
Apple
macOS Sonoma 14.8.8
203CVEs
227Credits
1Claimed
226 lines open to claim
Claim yours →
Apple
macOS Sequoia 15.7.8
223CVEs
250Credits
0Claimed
250 lines open to claim
Claim yours →
Apple
macOS Tahoe 26.6
298CVEs
376Credits
1Claimed
375 lines open to claim
Claim yours →
Apple
iOS 26.6 and iPadOS 26.6
170CVEs
217Credits
0Claimed
217 lines open to claim
Claim yours →
Google Chrome
Stable Channel Update for Desktop — 150.0.7871.186/.187
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Drupal
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
5CVEs
5Credits
0Claimed
5 lines open to claim
Claim yours →
Drupal
PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088
3CVEs
3Credits
0Claimed
3 lines open to claim
Claim yours →
Moodle
MAPP-26-0001: Site plugin can read web service tokens from other stored sites
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
5CVEs
5Credits
0Claimed
5 lines open to claim
Claim yours →
Zoom
ZSB-26011: Zoom Rooms for Windows - Improper Privilege Management
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26012: Zoom Clients for Windows - Race Condition
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26013: Zoom Workplace VDI Plugin for Windows - Improper Input Validation
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26014: Zoom Workplace for Windows - Improper Input Validation
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Microsoft
July 2026 Security Updates
1050CVEs
1050Credits
0Claimed
1050 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7
8CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
Apple
Safari 26.5.2
68CVEs
72Credits
0Claimed
72 lines open to claim
Claim yours →
Apple
macOS Tahoe 26.5.2
82CVEs
87Credits
0Claimed
87 lines open to claim
Claim yours →
Apple
iOS 26.5.2 and iPadOS 26.5.2
82CVEs
87Credits
0Claimed
87 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 19.1.1, 19.0.3, 18.11.6
11CVEs
11Credits
0Claimed
11 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-06-24
13CVEs
15Credits
0Claimed
15 lines open to claim
Claim yours →
Moodle
MSA-26-0021: CSRF and XSS in grade item idnumber editing
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0022: CSRF risk in group messaging state toggle
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0023: CSRF risk when adding quiz section headings
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0024: Missing capability checks in AI placement web services
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0025: CSRF risk in quiz attempt regrading
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0026: Missing capability check in Assignment marker allocation
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0027: Blind SSRF risk in MNet peers function
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0028: DoS risk via user profile description
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Moodle
MSA-26-0029: Missing capability checks in report builder fragment callbacks
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Drupal
Drupal core - Critical - PHP object injection - SA-CORE-2026-005
6CVEs
6Credits
0Claimed
6 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008
18CVEs
18Credits
0Claimed
18 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Apple
Beats Firmware Update 1B211
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8
11CVEs
11Credits
0Claimed
11 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-06-10
7CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
Zoom
ZSB-26009: Remote Control for Zoom Contact Center for Windows - Insufficient Verification of Data Authenticity
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26010: Zoom Workplace Mobile Clients - Improper Authorization in Handler for Custom URL Scheme
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
Microsoft
June 2026 Security Updates
332CVEs
332Credits
0Claimed
332 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 19.0.1, 18.11.4, 18.10.7
6CVEs
6Credits
0Claimed
6 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-05-27
12CVEs
12Credits
0Claimed
12 lines open to claim
Claim yours →
Drupal
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
8CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.11.3, 18.10.6, 18.9.7
21CVEs
21Credits
0Claimed
21 lines open to claim
Claim yours →
Apple
Safari 26.5
40CVEs
47Credits
0Claimed
47 lines open to claim
Claim yours →
Zoom
ZSB-26007: Zoom Workplace VDI Plugin for Windows - External Control of File Name or Path
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Zoom
ZSB-26008: Zoom Rooms for Windows - Untrusted Search Path
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Microsoft
May 2026 Security Updates
210CVEs
210Credits
0Claimed
210 lines open to claim
Claim yours →
Apple
macOS Tahoe 26.5
136CVEs
189Credits
1Claimed
188 lines open to claim
Claim yours →
Apple
iOS 18.7.9 and iPadOS 18.7.9
71CVEs
76Credits
0Claimed
76 lines open to claim
Claim yours →
Apple
iOS 26.5 and iPadOS 26.5
96CVEs
127Credits
0Claimed
127 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-04-29
8CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.11.1, 18.10.4, 18.9.6
10CVEs
10Credits
0Claimed
10 lines open to claim
Claim yours →
Drupal
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
11CVEs
11Credits
0Claimed
11 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
12CVEs
12Credits
0Claimed
12 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003
7CVEs
7Credits
0Claimed
7 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.10.3, 18.9.5, 18.8.9
11CVEs
11Credits
0Claimed
11 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.10.1, 18.9.3, 18.8.7
12CVEs
12Credits
0Claimed
12 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-03-18
3CVEs
3Credits
0Claimed
3 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.9.2, 18.8.6, 18.7.6
15CVEs
15Credits
0Claimed
15 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.9.1, 18.8.5, 18.7.5
8CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2026-02-18
2CVEs
2Credits
0Claimed
2 lines open to claim
Claim yours →
GitLab
GitLab Patch Release: 18.8.4, 18.7.4, 18.6.6
17CVEs
17Credits
0Claimed
17 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-12-10
8CVEs
8Credits
0Claimed
8 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
15CVEs
15Credits
0Claimed
15 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
11CVEs
11Credits
0Claimed
11 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
10CVEs
10Credits
0Claimed
10 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
11CVEs
11Credits
0Claimed
11 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-10-29
15CVEs
15Credits
0Claimed
15 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-09-17
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-09-03
3CVEs
3Credits
0Claimed
3 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-07-09
25CVEs
25Credits
0Claimed
25 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-06-06
0CVEs
0Credits
0Claimed
0 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-05-14
5CVEs
5Credits
0Claimed
5 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-04-10
1CVEs
1Credits
0Claimed
1 line open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-04-02
10CVEs
10Credits
0Claimed
10 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-03-19
3CVEs
3Credits
0Claimed
3 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
14CVEs
14Credits
0Claimed
14 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-03-05
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
12CVEs
12Credits
0Claimed
12 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002
4CVEs
4Credits
0Claimed
4 lines open to claim
Claim yours →
Drupal
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
6CVEs
6Credits
0Claimed
6 lines open to claim
Claim yours →
Jenkins
Jenkins Security Advisory 2025-01-22
7CVEs
7Credits
0Claimed
7 lines open to claim
Claim yours →
Signify
Signify Coordinated Vulnerability Disclosure hall of fame
0CVEs
32Credits
0Claimed
32 lines open to claim
Claim yours →
Schneider Electric
Schneider Electric Cybersecurity Wall of Thanks
0CVEs
344Credits
0Claimed
344 lines open to claim
Claim yours →
Philips
Philips Coordinated Vulnerability Disclosure Hall of Honors
0CVEs
456Credits
0Claimed
456 lines open to claim
Claim yours →
Palo Alto Networks
Palo Alto Networks security researcher acknowledgments
0CVEs
130Credits
0Claimed
130 lines open to claim
Claim yours →
Wikimedia Foundation
Wikimedia security hall of fame
121CVEs
139Credits
0Claimed
139 lines open to claim
Claim yours →
Axis Communications
Axis Communications security hall of fame
86CVEs
101Credits
0Claimed
101 lines open to claim
Claim yours →
Apple
Apple web server security acknowledgements
0CVEs
661Credits
0Claimed
661 lines open to claim
Claim yours →
NVIDIA
NVIDIA product security acknowledgements
782CVEs
843Credits
0Claimed
843 lines open to claim
Claim yours →
Mozilla
Mozilla bug bounty hall of fame
0CVEs
476Credits
0Claimed
476 lines open to claim
Claim yours →