CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

12 matches found

attackerkb•added 2026/07/20 10:01 p.m.•13 views

CVE-2026-57494

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=...

7.1CVSS5.3AI score0.00372EPSS

SaveExploits0References2Affected Software1

CVE•added 2026/07/16 9:19 p.m.•107 views

CVE-2026-44177

CVE-2026-44177 affects Kirby CMS (Kirby 5.3.0 up to

8.8CVSS5.6AI score0.0177EPSS

SaveExploits0References2

OSV•added 2026/06/18 5:20 p.m.•30 views

GHSA-HJWC-26PJ-V3PM AgenticMail: Cross-agent task authorization bypass in AgenticMail API

Summary A low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the...

7.1CVSS5.7AI score0.00372EPSS

SaveExploits0References2

Snyk•added 2026/05/06 9:19 p.m.•32 views

Arbitrary File Upload

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Arbitrary File Upload via the blueprint-upload process. An attacker can gain full administrative access by uploading a crafted YAML file to th...

8.8CVSS5.9AI score0.0048EPSS

SaveExploits1References3

EUVD•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-48556

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00266EPSS

SaveExploits0References2