CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

33927 matches found

RedhatCVE•added 2025/10/04 12:56 a.m.•28 views

CVE-2025-60452

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...

6.1CVSS5.8AI score0.00228EPSS

SaveExploits1References1

osv_rlsa•added 2025/10/04 12:11 a.m.•20 views

RLSA-2025:8203 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in Thunderbird CVE-2025-3875 thunderbird: Unsolicited File Download,...

7.5CVSS6.5AI score0.0047EPSS

SaveExploits0References5

osv_rlsa•added 2025/10/04 12:11 a.m.•19 views

RLSA-2025:10196 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links CVE-2025-5986 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...

7.5CVSS6.4AI score0.07964EPSS

SaveExploits0References6

Rockylinux•added 2025/10/04 12:11 a.m.•45 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

8.1CVSS6.5AI score0.0047EPSS

SaveExploits0

Patchstack•added 2025/10/03 11:17 p.m.•20 views

WordPress Backup Bolt plugin <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download vulnerability

Authenticated Admin+ Arbitrary File Download vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Backup Bolt versions = 1.4.1...

3.8CVSS6.8AI score0.00311EPSS

SaveExploits0References1Affected Software1