CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

238 matches found

Positive Technologies•added 2026/02/25 12:0 a.m.•9 views

PT-2026-21952

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager affected versions not specified Description An issue in the API of Cisco Catalyst SD-WAN Manager, specifically within the Data Collection Agent DCA service, results from improper file handling and the incorrect us...

7.5CVSS7.5AI score0.07016EPSS

Exploits0References63

CNNVD•added 2026/02/19 12:0 a.m.•11 views

OpenText XM Fax 路径遍历漏洞

OpenText XM Fax is an IP fax software developed by OpenText Corporation in Canada. Version 24.2 of OpenText XM Fax contains a path traversal vulnerability. This vulnerability arises due to improper path restrictions, which may allow for path traversal attacks, thereby exposing content from the...

7.5CVSS5.8AI score0.00309EPSS

Exploits0References1

CVE•added 2026/02/01 12:56 p.m.•14 views

CVE-2022-50950

CVE-2022-50950 affects Webile 1.0.1 and describes a directory traversal vulnerability in the web application that allows remote attackers to manipulate file system paths without authentication. The underlying issue is path manipulation enabling access to sensitive system directories and potential...

7.1CVSS5.9AI score0.00875EPSS

Exploits0References3

Positive Technologies•added 2026/02/01 12:0 a.m.•11 views

PT-2026-5571

Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths without authentication. Attackers can exploit path manipulation to access sensitive system directories and potentially compromise the mobile device's local file system...

7.1CVSS5.9AI score0.00875EPSS

Exploits0References4

RedhatCVE•added 2026/01/09 12:15 p.m.•18 views

CVE-2018-1000150

An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealmauthContext that allows attackers with local file system access to obtain a list of authorities for logged in users...

3.3CVSS6AI score0.00349EPSS

Exploits0References1

Cvelist•added 2025/12/26 6:53 a.m.•23 views

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

6.7CVSS0.00192EPSS

Exploits0References1