Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

25226 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/06/09 12:00 a.m.•8 views

CVE-2026-44805: Use After Free

Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...

5.5CVSS6.3AI score0.00399EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE•added 2026/06/08 8:59 p.m.•35 views

CVE-2026-36501

An issue in the Externalizable.readExternal component of Controller v12.0.5 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References1
NVD
NVD•added 2026/06/08 5:16 p.m.•28 views

CVE-2026-46304

In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmetctrlfree nvmettcpreleasequeuework runs on nvmet-wq and can drop the final controller reference through nvmetcqput. If that triggers nvmetctrlfree, the teardown path flushes...

7.5CVSS0.00437EPSS
SaveExploits0References9
attackerkb
attackerkb•added 2026/06/08 3:46 p.m.•17 views

CVE-2026-46304

In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmetctrlfree nvmettcpreleasequeuework runs on nvmet-wq and can drop the final controller reference through nvmetcqput. If that triggers nvmetctrlfree, the teardown path flushes...

6.7AI score0.00437EPSS
SaveExploits0References9Affected Software1
CVE
CVE•added 2026/06/08 3:46 p.m.•92 views

CVE-2026-46304

MODE C: The CVE-2026-46304 entry centers on the Linux kernel nvmet subsystem. The vulnerability stems from nvmet_tcp_release_queue_work() running on the nvmet-wq and possibly dropping the final controller reference through nvmet_cq_put(), which can trigger nvmet_ctrl_free() and flush ctrl->asy...

7.5CVSS6.5AI score0.00437EPSS
SaveExploits0References9Affected Software1
osv_cve
osv_cve•added 2026/06/08 3:46 p.m.•16 views

CVE-2026-46296 spi: s3c64xx: fix NULL-deref on driver unbind

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe back to s3c64xxspipreparetransfer failed to remove the corresponding deallocation from remove. Drop the bogus DMA channel release fro...

5.8AI score
SaveExploits0References9
attackerkb
attackerkb•added 2026/06/08 3:46 p.m.•18 views

CVE-2026-46296

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe back to s3c64xxspipreparetransfer failed to remove the corresponding deallocation from remove. Drop the bogus DMA channel release fro...

5.5AI score0.00162EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD•added 2026/06/08 3:46 p.m.•33 views

EUVD-2026-35161

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in kvmapicupdateirr even if PIR is empty Fall back to apicfindhighestvector when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt from the existing IRR. In a...

5.9AI score0.0016EPSS
SaveExploits0References3
NVD
NVD•added 2026/06/08 3:16 p.m.•30 views

CVE-2026-11521

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

6.5CVSS0.00272EPSS
SaveExploits0References6
osv_cleanstart
osv_cleanstart•added 2026/06/08 2:41 p.m.•17 views

CLEANSTART-2026-UK19445 Security fixes for CVE-2025-23419, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.15.1-r0, 1.15.1-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.15 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.4AI score0.02795EPSS
SaveExploits0References33
Cvelist
Cvelist•added 2026/06/08 2:15 p.m.•62 views

CVE-2026-11521 Mohammed-eid35 bank-management-system-springboot Transaction Endpoint TransactionController.java improper authorization

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

6.5CVSS0.00272EPSS
SaveExploits0References6
CVE
CVE•added 2026/06/08 2:15 p.m.•45 views

CVE-2026-11521

Mohammed-eid35 bank-management-system-springboot (Transaction Endpoint) has a vulnerability in TransactionController.java leading to improper authorization. A remote attacker could exploit it, and public PoCs exist per the CVE metrics. Affected version details are not provided due to rolling rele...

6.5CVSS6AI score0.00272EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/06/08 2:15 p.m.•27 views

EUVD-2026-35075

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

6.5CVSS6AI score0.00272EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/06/08 2:15 p.m.•18 views

CVE-2026-11521 Mohammed-eid35 bank-management-system-springboot Transaction Endpoint TransactionController.java improper authorization

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

6.5CVSS6AI score0.00272EPSS
SaveExploits0References6
osv_cleanstart
osv_cleanstart•added 2026/06/08 12:53 p.m.•17 views

CLEANSTART-2026-GM77447 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.3AI score0.00692EPSS
SaveExploits0References21
Snyk
Snyk•added 2026/06/08 11:19 a.m.•12 views

Directory Traversal

Overview bagisto/bagisto is a hand tailored E-Commerce framework designed on some opensource technologies such as Laravel a PHP framework, Vue.js a progressive Javascript framework. Affected versions of this package are vulnerable to Directory Traversal via ImageCacheController component. An...

8.7CVSS6.1AI score0.01806EPSS
SaveExploits0References2
NVD
NVD•added 2026/06/08 10:16 a.m.•32 views

CVE-2026-9506

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files...

8.7CVSS0.01806EPSS
SaveExploits0References1
attackerkb
attackerkb•added 2026/06/08 9:28 a.m.•14 views

CVE-2026-9506

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files...

8.7CVSS6.2AI score0.01806EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD•added 2026/06/08 9:28 a.m.•30 views

EUVD-2026-35036

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files...

8.7CVSS6.2AI score0.01806EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/06/08 9:28 a.m.•16 views

CVE-2026-9506 Path Traversal Vulnerability in Bagisto

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files...

8.7CVSS6.2AI score0.01806EPSS
SaveExploits0References1
Rows per page
Query Builder