CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7940 matches found

Cvelist•added 2025/10/06 6:47 a.m.•20 views

CVE-2025-58578 Unlimited user creation by authorized users

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

3.8CVSS0.00299EPSS

SaveExploits0References6

EUVD•added 2025/10/06 6:47 a.m.•8 views

EUVD-2025-32501

3.8CVSS6.3AI score0.00299EPSS

SaveExploits0References7

NVD•added 2025/10/04 8:15 p.m.•11 views

CVE-2025-11272

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...

5.5CVSS0.00262EPSS

SaveExploits0References5

CNNVD•added 2025/10/04 12:00 a.m.•9 views

ZKEACMS 授权问题漏洞

ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...

5.5CVSS5.5AI score0.00262EPSS

SaveExploits0References5

Tenable Nessus•added 2025/10/04 12:00 a.m.•6 views

RockyLinux 9 : mod_auth_openidc (RLSA-2025:9396)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9396 advisory. modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled CVE-2025-3891 Tenable has extracted the preceding description block directly fr...

7.5CVSS6.2AI score0.01424EPSS

SaveExploits0References3

EUVD•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-39484