CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

66 matches found

EUVD-2026-45181

A cross-site scripting XSS vulnerability in Proxmox Virtual Environment PVE 9.x 5.1.8 and Proxmox Virtual Environment PVE 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

6.1CVSS5.3AI score

Exploits0References2

NVD•added 8 hours ago•5 views

CVE-2026-51081

6.1CVSS

Exploits0References1

NVD•added 8 hours ago•6 views

CVE-2026-51083

Incorrect access control in Proxmox Virtual Environment PVE 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API...

6.5CVSS

Exploits0References1

Cvelist•added 23 hours ago•8 views

CVE-2026-51081

Exploits0References1

Cvelist•added 23 hours ago•9 views

CVE-2026-51083

Exploits0References1

Vulnrichment•added 23 hours ago•4 views

CVE-2026-51083

5.3AI score

Exploits0References1

Cvelist•added 23 hours ago•10 views

CVE-2026-51082

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment PVE 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 PVE 9.x and before 5.3.4 PVE 8.x allows an attacker with...

Exploits0References1

Positive Technologies•added 23 hours ago•5 views

PT-2026-60774

5.3AI score

Exploits0References1

CVE•added 23 hours ago•5 views

CVE-2026-51083

Proxmox VE is affected: incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users with limited privileges to obtain hashed passwords via the cloudinit/dump API. The root cause is an access-control issue in the cloudinit/dump endpo...

6.5CVSS5.3AI score

Exploits0References1

Positive Technologies•added 23 hours ago•5 views

PT-2026-60773

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment PVE 9.x pve-manager 9.1.x before 9.1.9 and 8.4.x before 8.4.19; qemu-server 9.1.x before 9.1.7 and 8.4.x before 8.4.7; and pve-container 6.1.x before 6.1.3 and 5.3.x before 5.3.4 allows an attacker wit...

5.3AI score

Exploits0References1

Positive Technologies•added 23 hours ago•5 views

PT-2026-60772

5.3AI score

Exploits0References1

Vulnrichment•added 23 hours ago•4 views

CVE-2026-51081

5.4AI score

Exploits0References1

RedhatCVE•added 2026/01/09 10:46 a.m.•8 views

CVE-2022-31358

A reflected cross-site scripting XSS vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/...

9CVSS5.9AI score0.01273EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 10:41 a.m.•9 views

CVE-2022-35508

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

9.8CVSS7AI score0.01175EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 10:39 a.m.•28 views

CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

7.1CVSS7AI score0.0138EPSS

Exploits1References1