Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1821 matches found

CNNVD
CNNVD•added 2026/04/27 12:00 a.m.•30 views

Apache Storm Prometheus Reporter Trust Management Vulnerability

Apache Storm Prometheus Reporter is a monitoring component developed by the Apache Foundation that converts metrics from distributed stream processing systems into Prometheus format. Versions 2.6.3 to 2.8.6 of Apache Storm Prometheus Reporter contain vulnerabilities related to trust management...

4.8CVSS6AI score0.00193EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/04/27 12:00 a.m.•11 views

CVE-2026-40557: Improper Certificate Validation

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skiptlsvalidation by default it is...

4.8CVSS5.8AI score0.00193EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2026/04/27 12:00 a.m.•36 views

PT-2026-35413

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip tls validation by default it is...

5.8AI score0.00193EPSS
SaveExploits0References5
osv_cleanstart
osv_cleanstart•added 2026/04/16 1:02 a.m.•43 views

CLEANSTART-2026-WB12909 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

9.8CVSS6.7AI score0.01584EPSS
SaveExploits5References70
osv_cleanstart
osv_cleanstart•added 2026/04/16 1:01 a.m.•36 views

CLEANSTART-2026-UQ68343 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

9.8CVSS6.7AI score0.02292EPSS
SaveExploits6References41
osv_cleanstart
osv_cleanstart•added 2026/04/16 1:01 a.m.•17 views

CLEANSTART-2026-CR55131 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

9.8CVSS6.6AI score0.02292EPSS
SaveExploits2References27
osv_cleanstart
osv_cleanstart•added 2026/04/16 12:58 a.m.•22 views

CLEANSTART-2026-ZT45130 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

9.8CVSS6.6AI score0.00774EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies•added 2026/04/16 12:00 a.m.•6 views

PT-2026-56376

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

9.8CVSS5.9AI score0.00621EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies•added 2026/04/16 12:00 a.m.•7 views

PT-2026-42324

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

10CVSS6.8AI score0.02292EPSS
SaveExploits6References42
Positive Technologies
Positive Technologies•added 2026/04/16 12:00 a.m.•8 views

PT-2026-42352

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...

9.8CVSS6.6AI score0.01584EPSS
SaveExploits4References71
Chainguard
Chainguard•added 2026/04/11 2:18 a.m.•26 views

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: dkron, ingress-nginx-controller-fips, flux-source-watcher, commercial-chainloop-backend, go, oras-fips, eks-node-monitoring-agent, rabbitmq-messaging-topology-operator, nova, flux-source-controller-fips, smokescreen, flux, atlas-fips, victorialogs-fips, nodetaint-fip...

8.8CVSS7.5AI score0.0034EPSS
SaveExploits0
Chainguard
Chainguard•added 2026/04/11 2:18 a.m.•36 views

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: docker-cli, ingress-nginx-controller-fips, aws-eks-pod-identity-agent, cert-manager-cmctl, kube-arangodb-fips, flux-source-watcher, scorecard, bento, commercial-chainloop-backend, terraform-provider-databricks, eks-node-monitoring-agent, prometheus-adapter, langfuse,...

7.5CVSS7.4AI score0.00621EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart•added 2026/04/10 12:56 a.m.•22 views

CLEANSTART-2026-MU81308 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the kyverno-policy-reporter-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

9.8CVSS6.6AI score0.01584EPSS
SaveExploits1References22
Tenable Nessus
Tenable Nessus•added 2026/04/09 12:00 a.m.•16 views

ManageEngine Exchange Reporter Plus < Build 5802 Multiple Stored XSS

The version of ManageEngine Exchange Reporter Plus on the remote host has a build number prior to 5802. It is, therefore, affected by multiple vulnerabilities, including: - Stored XSS in the Folder Message Count and Size report. CVE-2026-4107 - Stored XSS in the Permissions Based on Mailboxes...

7.3CVSS6AI score0.00538EPSS
SaveExploits0References16
RedhatCVE
RedhatCVE•added 2026/04/08 7:27 p.m.•22 views

CVE-2021-4473

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

9.8CVSS7AI score0.06165EPSS
SaveExploits1References1
EUVD
EUVD•added 2026/04/07 3:30 p.m.•18 views

EUVD-2021-34776

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

9.8CVSS6.7AI score0.06165EPSS
SaveExploits1References6
NVD
NVD•added 2026/04/07 1:16 p.m.•27 views

CVE-2021-4473

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

9.8CVSS0.06165EPSS
SaveExploits1References5
Cvelist
Cvelist•added 2026/04/07 12:50 p.m.•44 views

CVE-2021-4473 Tianxin Internet Behavior Management System Command Injection via toQuery.php

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

9.8CVSS0.06165EPSS
SaveExploits1References5
attackerkb
attackerkb•added 2026/04/07 12:50 p.m.•13 views

CVE-2021-4473

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

9.8CVSS6.7AI score0.06165EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment•added 2026/04/07 12:50 p.m.•11 views

CVE-2021-4473 Tianxin Internet Behavior Management System Command Injection via toQuery.php

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

9.8CVSS6.9AI score0.06165EPSS
SaveExploits1References5
Rows per page
Query Builder