CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10660 matches found

Wolfi•added 2026/10/16 8:53 p.m.•1 views

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, crossplane-provider-aws-memorydb, crossplane-provider-aws-s3, crossplane-provider-aws-kms, crossplane-provider-azure-storage, crossplane-provider-aws-rds, crossplane-provider-aws-firehose, crossplane-provider-aws-sns,...

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

GHSA-VRCC-3CH7-HPPW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, crossplane-provider-keycloak, crossplane-provider-aws-dynamodb, crossplane-provider-aws-kms, crossplane-provider-family-aws, crossplane-provider-aws-sns, crossplane-provider-aws-ec2, terraform-provider-grafana,...

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

GHSA-G8CF-RCJF-C8CF vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

GHSA-RJ39-CV6W-8WV7 vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

GHSA-FH4F-47MF-F2GJ vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

CVE-2026-100352 vulnerabilities

7.5CVSS5.8AI score0.00426EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

CVE-2026-100354 vulnerabilities

7.5CVSS5.8AI score0.00435EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

CVE-2026-100353 vulnerabilities

7.5CVSS5.8AI score0.00335EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•1 views

CVE-2026-100347 vulnerabilities

5.3CVSS5.8AI score0.00515EPSS

SaveExploits0

Kitploit•added 2026/10/16 7:48 p.m.•23 views

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation pip install -r requirements.txt Usage Basic check...

6.4AI score

SaveExploits0References1

CVE•added 2026/10/16 7:21 p.m.•8 views

CVE-2026-59970

Prior to version 2.6.10 , Tandoor Recipes is vulnerable to a Blind Server-Side Request Forgery (SSRF) via the AI provider URL (api_base ). An authenticated user can configure an AI provider with a URL targeting internal addresses; when an AI action is invoked, the application passes this URL to L...

7.7CVSS5.7AI score

SaveExploits0References3

Kitploit•added 2026/10/16 7:13 p.m.•57 views

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

6.1AI score

SaveExploits0References25

Kitploit•added 2026/10/16 6:46 p.m.•89 views

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

6AI score

SaveExploits0References1

NVD•added 2026/10/16 6:17 p.m.•7 views

CVE-2026-111704

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

9.8CVSS

SaveExploits0References5

NVD•added 2026/10/16 6:17 p.m.•8 views

CVE-2026-111682

EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLEUSER account can query /api/model-config/page or /api/model-config/id to retrieve...

7.1CVSS

SaveExploits0References5

EUVD•added 2026/10/16 5:39 p.m.•2 views

EUVD-2026-102996

9.8CVSS5.9AI score

SaveExploits0References5

CVE•added 2026/10/16 5:39 p.m.•7 views

CVE-2026-111704

LangChat (through commit 2a6285a) is vulnerable to a missing authentication flaw because no Sa-Token interceptor is registered. This allows unauthenticated remote attackers to access REST controllers. Specifically, attackers can query /api/v1/auth/users to read plaintext passwords , retrieve LLM ...

9.8CVSS5.9AI score

SaveExploits0References5

CVE•added 2026/10/16 5:39 p.m.•5 views

CVE-2026-111682

The software EFAK versions 5.0.0 through 5.1.0 is vulnerable to a missing authorization flaw (CWE-862) within the /api/model-config REST API. Authenticated users with low-privilege ROLE_USER accounts can query the /api/model-config/page or /api/model-config/{id} endpoints to retrieve unmasked LLM...

7.1CVSS5.8AI score

SaveExploits0References5

Cvelist•added 2026/10/16 5:39 p.m.•9 views

CVE-2026-111682 EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys

7.1CVSS

SaveExploits0References5

EUVD•added 2026/10/16 5:39 p.m.•1 views

EUVD-2026-102973

7.1CVSS5.8AI score

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by