CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

34942 matches found

OSV•added 2026/05/18 2:00 p.m.•17 views

CLEANSTART-2026-SW24654 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283 applied in versions: 3.2.1-r0

Multiple security vulnerabilities affect the aws-load-balancer-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

7.5CVSS7.1AI score0.00621EPSS

SaveExploits0References9

RedhatCVE•added 2026/05/18 1:57 a.m.•28 views

CVE-2024-13971

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobsterpro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services...

7.7CVSS6AI score0.0047EPSS

SaveExploits2References1

CNNVD•added 2026/05/18 12:00 a.m.•23 views

DumbAssets 跨站脚本漏洞

DumbAssets is a physical asset tracking and management tool developed by DumbWare. Versions of DumbAssets 1.0.11 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from a storage-based cross-site scripting issue in asset fields. It allowed attackers to create o...

6.1CVSS6.3AI score0.0031EPSS

SaveExploits0References1

Positive Technologies•added 2026/05/18 12:00 a.m.•31 views

PT-2026-41718

Name of the Vulnerable Software and Affected Versions DumbAssets versions 1.0 through 1.0.11 Description A stored cross-site scripting issue exists in asset fields, specifically name, description, modelNumber, serialNumber, and tags. These fields are stored without server-side sanitization and...

6.1CVSS5.9AI score0.0031EPSS

SaveExploits0References5

BDU FSTEC•added 2026/05/18 12:00 a.m.•16 views

The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain unauthorized access to protected information.

The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

7.8CVSS7.4AI score0.00457EPSS

SaveExploits0References13Affected Software5

Microsoft CVE•added 2026/05/16 8:04 a.m.•37 views

PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

...

7.5CVSS6.9AI score0.00595EPSS

SaveExploits0

Veracode•added 2026/05/16 5:32 a.m.•44 views

Server-Side Request Forgery

esm.sh is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation in the /https fetch route, where localhost and internal network protections rely on hostname string checks that can be bypassed using DNS alias domains, allowing attackers to induce...

8.6CVSS7.7AI score0.00475EPSS

SaveExploits1References4Affected Software1

Veracode•added 2026/05/16 5:23 a.m.•15 views

Server-Side Request Forgery (SSRF)

github.com/zalando/skipper is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient restrictions on Kubernetes ExternalName services when Skipper is used as an Ingress controller, which allows an attacker with permissions to create an Ingress and an ExternalName...

8.1CVSS8AI score0.00306EPSS

SaveExploits0References3Affected Software1