CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

236 matches found

Positive Technologies•added 2026/05/05 12:0 a.m.•10 views

PT-2026-37261

Name of the Vulnerable Software and Affected Versions Fides versions 2.75.0 through 2.83.1 Description Deployments that enable both subject identity verification and duplicate privacy request detection are susceptible to an issue where an administrator can approve a privacy request without the...

6.1CVSS5.7AI score0.00313EPSS

Exploits0References9

RedhatCVE•added 2026/01/09 9:35 a.m.•8 views

CVE-2024-34715

Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persistent storage of application data. If the password used by the webserver for this database connection includes special characters such as @ and $, webserver...

3.3CVSS6.8AI score0.00275EPSS

Exploits1References1

vulnersOsv•added 2025/11/26 10:8 p.m.•9 views

-fides-amor-et-lux (=1.0.0), -tompan-reacttemplate (>=1.0.1 <=1.1.0) +41716 more potentially affected by CVE-2025-66031 via node-forge (>=0.10.0 <=1.3.1)

node-forge NPM version =0.10.0, =1.0.1, =1.1.0 - 00ld8nuivn =2.1.0 - 00rqiw31nd =2.1.0 - 01dk01majk =2.1.0 - 02rjq8i863 =1.1.0 - 02vx8qsp01 =2.1.0 - 05y6tjgmws =1.1.0 - 066m7q8o0z =2.1.0 - 06buj9h3su =2.1.0 - 06dre15t8r =2.1.0 - 0726react =0.1.1 - 07fgapmu9l =1.1.0 - 07t2xvu6t4 =2.1.0 - 0850u4lkp...

8.7CVSS6.6AI score0.00373EPSS

Exploits0

vulnersOsv•added 2025/11/26 10:7 p.m.•8 views

-fides-amor-et-lux (=1.0.0), -tompan-reacttemplate (>=1.0.1 <=1.1.0) +41716 more potentially affected by CVE-2025-12816 via node-forge (>=0.10.0 <=1.3.1)

8.6CVSS6.9AI score0.00689EPSS

Exploits1

Veracode•added 2025/10/14 7:19 a.m.•6 views

Improper Session Invalidation

ethycafides is vulnerable to improper session invalidation. The vulnerability is due to active user sessions not being invalidated after an admin UI password change, which allows an attacker with previously obtained session tokens to maintain unauthorized access even after a password reset...

6.3CVSS7AI score0.00275EPSS

Exploits1References5Affected Software1

Veracode•added 2025/10/14 7:19 a.m.•6 views

Improper Authorization

ethycafides is vulnerable to improper authorization. The vulnerability is due to insufficient scope validation in the OAuth client creation and update endpoints, which allows an attacker or a highly privileged user to escalate privileges to owner-level...

8.6CVSS7.2AI score0.00392EPSS

Exploits0References5Affected Software1