CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

85027 matches found

ATTACKERKB•added 2026/07/08 10:35 p.m.•16 views

CVE-2026-15112

Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

6AI score0.00345EPSS

SaveExploits0References3Affected Software1

OSSF Malicious Packages•added 2026/07/08 4:24 p.m.•44 views

Malicious code in higherlogic-ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73e9c228fc5188d602b213f2c6e7f88d6acbb4a9381667b7c33e4cb825aedf2 Package [email protected] is a dependency-confusion lure targeting the Higher Logic vendor namespace. The published index.js is an empty...

6.2AI score

SaveExploits0References2

OSV•added 2026/07/08 4:24 p.m.•16 views

MAL-2026-6998 Malicious code in higherlogic-ocfe (npm)

6.2AI score

SaveExploits0References2

OSSF Malicious Packages•added 2026/07/08 4:24 p.m.•42 views

Malicious code in babel-eslint-parser-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a6f04cbf0697b6ae409fb9e5ad0e25812dac6a2f43bd95722f1903ee2f71f7 Package name babel-eslint-parser-legacy is a one-suffix confusion against the legitimate babel-eslint-parser. The package's own main is an empty stub...

6.2AI score

SaveExploits0References2

OSV•added 2026/07/08 4:24 p.m.•14 views

MAL-2026-6989 Malicious code in ag-charts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c50b5a47dde18daf83760926662df3b9890de074cc00938de04892ac79a4d9 [email protected] is a hollow package empty index.js, no scripts, no documented functionality whose sole effect on installers is resolving its...

6.2AI score

SaveExploits0References2

OSSF Malicious Packages•added 2026/07/08 4:24 p.m.•36 views

Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

6.2AI score

SaveExploits0References2

OSV•added 2026/07/08 3:07 p.m.•14 views

CVE-2026-59702 repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...

9.2CVSS6.2AI score

SaveExploits0References6