CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

82905 matches found

Positive Technologies•added 2026/07/13 12:0 a.m.•9 views

PT-2026-59564

Summary Type: Insecure Direct Object Reference. The project CRUD endpoints GET / PATCH / DELETE /workspaces/workspace id/projects/project id and GET .../project id/stats gate access on require workspace memberworkspace id only, then resolve project id through ProjectService.getproject id /...

8.1CVSS6.1AI score0.00289EPSS

SaveExploits0References6

Positive Technologies•added 2026/07/13 12:0 a.m.•8 views

PT-2026-59563

Summary Type: Insecure Direct Object Reference. The agent CRUD endpoints GET / PATCH / DELETE /workspaces/workspace id/agents/agent id gate access on require workspace memberworkspace id only, then resolve agent id through AgentService.getagent id which is a primary-key lookup with no workspace...

8.3CVSS6.1AI score0.00296EPSS

SaveExploits0References6

Positive Technologies•added 2026/07/13 12:0 a.m.•10 views

PT-2026-57906

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.4.42 Description An unauthenticated information disclosure issue exists where remote attackers can retrieve plaintext API keys for all connected AI provider accounts. This occurs due to missing authentication...

9.3CVSS6.2AI score0.00371EPSS

SaveExploits0References4

Positive Technologies•added 2026/07/13 12:0 a.m.•11 views

PT-2026-60047

Impact read character string and read string in src/zeroconf/ protocol/incoming.py sliced self.dataself.offset : self.offset + length and advanced self.offset by the declared length without checking it against self. data len. Python's slice silently returns fewer bytes when the end index runs pas...

6.5CVSS6.1AI score0.00203EPSS

SaveExploits0References8

Positive Technologies•added 2026/07/13 12:0 a.m.•14 views

PT-2026-60060

Summary Apollo Portal versions before 2.5.0 do not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId. When configView.memberOnly.envs is enabled for the requested environment, a low-privileged Portal user can...

6.5CVSS6.1AI score0.00304EPSS

SaveExploits0References7