CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

767 matches found

Patchstack•added 2026/05/01 9:16 a.m.•9 views

WordPress Team Members Showcase plugin <= 3.3.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Team Members versions = 3.3.0...

6.1CVSS5.8AI score0.00276EPSS

Exploits0References1Affected Software1

vulnersOsv•added 2026/04/28 12:31 a.m.•10 views

ai.driftkit:driftkit-audio-core (>=0.5.0 <=0.8.3), ai.driftkit:driftkit-audio-spring-boot-starter (>=0.5.0 <=0.8.7) +4998 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (>=3.3.0 <=3.3.13)

org.springframework.boot:spring-boot MAVEN version =3.3.0, =0.5.0, =0.5.0, =0.5.0, =0.5.8, =0.5.0, =0.5.7, =0.5.0, =0.6.0, =0.6.0, =0.5.0, =0.5.0, =0.5.0, =0.7.9, =0.6.0, =0.6.0, =0.8.7 and more Source cves: CVE-2026-40973 Source advisory: OSV:GHSA-WWPQ-F5C3-7HVX...

7CVSS5.7AI score0.00136EPSS

Exploits0

NVD•added 2026/04/24 11:16 a.m.•14 views

CVE-2025-62233

Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module. This issue affects Apache DolphinScheduler: Version = 3.2.0 and 3.3.1. Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class...

6.3CVSS0.00537EPSS

Exploits0References2

Vulnrichment•added 2026/04/24 10:54 a.m.•3 views

CVE-2025-62233 Apache DolphinScheduler: Deserialization of untrusted data in RPC

5.2AI score0.00537EPSS

Exploits0References1

OSV•added 2026/04/24 10:54 a.m.•4 views

CVE-2025-62233 Apache DolphinScheduler: Deserialization of untrusted data in RPC

6.3CVSS5.9AI score0.00537EPSS

Exploits0References5

Vulnrichment•added 2026/04/21 1:33 a.m.•14 views

CVE-2026-40250 OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1040 performs chan-width chan-bytesperelement in...

8.4CVSS5.8AI score0.0045EPSS

Exploits0References4

Veracode•added 2026/04/18 5:9 a.m.•24 views

Apache Log4net: Silent Log Event Loss In XmlLayout And XmlLayoutSchemaLog4J Due To Unescaped XML 1.0 Forbidden Character

Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.htmllayout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/configuration/layouts.htmllayout-list , in versions before 3.3.0, fail to sanitize characters forbidden by the XML 1.0...

6.3CVSS5.8AI score0.0075EPSS

Exploits0Affected Software1

CBLMariner•added 2026/04/14 6:44 p.m.•6 views

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-4

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-4. A patched version of the package is available...

8.8CVSS5.8AI score0.00663EPSS

Exploits0

SUSE CVE•added 2026/04/13 11:25 p.m.•5 views

SUSE CVE-2026-40021

6.3CVSS5.8AI score0.0075EPSS

Exploits0References3

EUVD•added 2026/04/10 6:31 p.m.•5 views

EUVD-2026-21488

6.3CVSS5.8AI score0.0075EPSS

Exploits0References7

OSV•added 2026/04/10 4:16 p.m.•5 views

DEBIAN-CVE-2026-40021

5.3CVSS5.4AI score0.0075EPSS

Exploits0References1

OSV•added 2026/04/10 4:16 p.m.•10 views

UBUNTU-CVE-2026-40021

6.3CVSS5.8AI score0.0075EPSS

Exploits0References8

Cvelist•added 2026/04/10 3:44 p.m.•31 views

CVE-2026-40021 Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

6.3CVSS0.0075EPSS

Exploits0References5

ATTACKERKB•added 2026/04/10 3:44 p.m.•5 views

CVE-2026-40021

6.3CVSS5.8AI score0.0075EPSS

Exploits0References6

Vulnrichment•added 2026/04/10 3:44 p.m.•3 views

CVE-2026-40021 Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

6.3CVSS5.8AI score0.0075EPSS

Exploits0References5

Debian CVE•added 2026/04/10 3:44 p.m.•3 views

CVE-2026-40021

6.3CVSS5.3AI score0.0075EPSS

Exploits0

OSV•added 2026/04/10 3:44 p.m.•4 views

CVE-2026-40021 Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

6.3CVSS5.8AI score0.0075EPSS

Exploits0References9

CNNVD•added 2026/04/08 12:0 a.m.•15 views

uac 操作系统命令注入漏洞

UAC is a Unix system forensics and incident response tool developed by Thiago Canozzo Lahr. Versions of UAC prior to 3.3.0-rc1 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the runcommand function, which directly passed the constructed...

8.5CVSS6AI score0.00726EPSS

Exploits0References7

CBLMariner•added 2026/04/06 11:43 p.m.•4 views

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5. A patched version of the package is available...

8.8CVSS5.9AI score0.00663EPSS

Exploits0

vulnersOsv•added 2026/04/03 3:45 a.m.•9 views

net.enilink.platform:net.enilink.platform.web (=1.6.0), org.webjars.npm:formio__core (=2.6.0) +1 more potentially affected by unknown CVE via org.webjars.npm:dompurify (>=3.1.7 <=3.3.0)

org.webjars.npm:dompurify MAVEN version =3.1.7, =0.54.0, =0.55.1 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15874904...

5.8AI score

Exploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by