CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

149897 matches found

OSV•added 2026/07/22 9:00 a.m.•6 views

SUSE-SU-2026:22893-1 Security update for nghttp2

This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with Content-Length bsc1269489...

6.3CVSS6.1AI score0.00319EPSS

SaveExploits0References3

OSV•added 2026/07/22 8:38 a.m.•13 views

SUSE-SU-2026:22807-1 Security update for pam

This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pamuserdb module's plaintext-password comparison bsc1268290...

8.2CVSS5.9AI score0.005EPSS

SaveExploits0References3

CVE•added 2026/07/22 8:33 a.m.•97 views

CVE-2026-15787

The CVE concerns The Ultimate Addons for Elementor (WordPress) up to version 2.9.1, where a Stored XSS exists in the Navigation Menu Widget via data-toggle-icon/data-close-icon attributes. The root cause is insufficient input sanitization and output escaping; wp_kses_post is applied on save for u...

6.4CVSS6.1AI score0.00419EPSS

SaveExploits0References11

OSV•added 2026/07/22 8:23 a.m.•7 views

OPENSUSE-SU-2026:21409-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: Fix compilation with GCC 15 CONC-762: always set isnull and length in...

9.1CVSS7.8AI score0.01015EPSS

SaveExploits0References2

NVD•added 2026/07/22 8:16 a.m.•22 views

CVE-2026-45820

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

8.7CVSS0.00488EPSS

SaveExploits0References2

OSV•added 2026/07/22 6:48 a.m.•13 views

DEBIAN-CVE-2026-50713