CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

18612 matches found

ATTACKERKB•added 2025/10/06 7:09 a.m.•5 views

CVE-2025-58579

Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...

5.3CVSS5.8AI score0.0038EPSS

SaveExploits0References7

Cvelist•added 2025/10/06 12:00 a.m.•22 views

CVE-2025-60956

Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...

0.00186EPSS

SaveExploits0References1

CVE•added 2025/10/06 12:00 a.m.•32 views

CVE-2025-60956

Summary: CVE-2025-60956 affects EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware version 4.00 (GPS) running on server hardware. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that could allow an attacker to cause arbitrary code execution, a denial of service, privi...

8CVSS7.2AI score0.00186EPSS

SaveExploits0References1Affected Software1

BDU FSTEC•added 2025/10/06 12:00 a.m.•5 views

The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.2AI score0.00258EPSS

SaveExploits0References15Affected Software4

OSV•added 2025/10/05 11:44 p.m.•7 views

BIT-MONGODB-2025-6713 MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB...

7.7CVSS6.8AI score0.00343EPSS

SaveExploits0References2

Rockylinux•added 2025/10/04 12:11 a.m.•24 views

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

8.8CVSS6.8AI score0.0029EPSS

SaveExploits0