Most affected software
- Traefik
- nginx
- UnrealIRCd
- Kubernetes
- Dify.ai
- Ollama
- Kafka
- Podman
- Apache HTTP Server
- Roundcube
- Tomcat
- PHP
- Jenkins
- CraftCMS
- WordPress
- Bash
- Elasticsearch
- Metabase
- OpenSSL
- n8n
- XWiki
- BIND 9
- MongoDB
- OpenSSH
- OpenJDK
- Ruby
- Gogs
- Superset
- october
- Redis
- Strapi
- FreeSWITCH
- Docker Engine
- Caddy
- ONLYOFFICE
- Adminer
- ProjectSend
- Kestra
- Openfire
- Mattermost
- MariaDB
- OpenEMR
- Discourse
- SiYuan
- PostgreSQL
- Open-WebUI
- curl
- Concrete 5 CMS
- Python
- Pimcore
- Chamilo LMS
- Gitea
- Nextcloud
- ERPNext
- Dolibarr
- Vikunja
- MantisBT
- MySQL
- TYPO3
- Budibase
Browse by category
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).