CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

295 matches found

OSV•added 2026/02/02 11:16 a.m.•5 views

CVE-2024-4147

In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to delete prompts created in other organizations through ID manipulation. The vulnerability stems from the application's failure to validate the ownership of the prompt before deletion, on...

6.5CVSS5.8AI score0.00388EPSS

Exploits1References2

NVD•added 2026/02/02 11:16 a.m.•6 views

CVE-2024-4147

7.5CVSS0.00388EPSS

Exploits1References2

NVD•added 2026/02/02 11:16 a.m.•6 views

CVE-2024-5386

In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijack another user's account by obtaining the password reset token. The vulnerability is triggered when the 'viewer' role...

9.6CVSS0.00482EPSS

Exploits2References2

EUVD•added 2026/02/02 10:36 a.m.•8 views

EUVD-2024-55392

9.6CVSS5.5AI score0.00482EPSS

Exploits2References2

NVD•added 2025/11/25 1:15 a.m.•8 views

CVE-2025-9803

lunary-ai/lunary version 1.9.34 is vulnerable to an account takeover due to improper authentication in the Google OAuth integration. The application fails to verify the 'aud' audience field in the access token issued by Google, which is crucial for ensuring the token is intended for the...

9.3CVSS0.00417EPSS

Exploits2References2

EUVD•added 2025/10/03 8:7 p.m.•4 views

EUVD-2025-6950

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.01395EPSS

Exploits1References3

EUVD•added 2025/10/03 8:7 p.m.•5 views

EUVD-2024-46383

Malicious code in bioql PyPI...

7.6CVSS7.7AI score0.00312EPSS

Exploits1References2