CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

ATTACKERKB•added 4 days ago•4 views

CVE-2026-57720

Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThumbPress: from n/a through 6.3.2...

4.3CVSS5.8AI score0.00203EPSS

Exploits0References2

Cvelist•added 6 days ago•33 views

CVE-2026-57336 WordPress Jobify theme <= 4.3.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Jobify = 4.3.2 versions...

7.1CVSS0.00146EPSS

CVE•added 6 days ago•11 views

CVE-2026-57336

CVE-2026-57336 affects the WordPress Jobify theme up to version 4.3.2 and is an unauthenticated Cross-Site Scripting (XSS) vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) indicates network access with low attack complexity, no privileges required, user interaction needed,...

7.1CVSS5.8AI score0.00146EPSS

IBM Security Bulletins•added 6 days ago•4 views

Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities (CVE-2026-7246)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-7246 DESCRIPTION: Pallets Click, versions 8.3.2...

7.2CVSS6AI score0.0081EPSS

Exploits1Affected Software1

Chainguard•added 2026/06/26 8:23 p.m.•9 views

GHSA-VWM4-62GF-X745 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-3M6Q-JJ5J-38C9 vulnerabilities

GHSA-475M-PH3X-64GP vulnerabilities

Chainguard•added 2026/06/26 8:23 p.m.•8 views

GHSA-9CV6-QCJW-4GRX vulnerabilities

Chainguard•added 2026/06/26 8:23 p.m.•8 views

GHSA-FM7P-MPRW-WJM9 vulnerabilities

GHSA-9PPP-W3G4-FH4Q vulnerabilities

Chainguard•added 2026/06/26 8:23 p.m.•8 views

CVE-2026-54899 vulnerabilities

6.3CVSS5.9AI score0.00428EPSS

Chainguard•added 2026/06/26 8:23 p.m.•7 views

CVE-2026-54898 vulnerabilities

2.1CVSS5.9AI score0.00117EPSS

Chainguard•added 2026/06/26 8:23 p.m.•7 views

CVE-2026-54903 vulnerabilities

6.3CVSS5.9AI score0.00253EPSS

GHSA-3V45-F3VH-WG7M vulnerabilities

NVD•added 2026/06/26 3:16 p.m.•5 views

CVE-2026-54834

Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone = 2.3.2 versions...

7.5CVSS0.00294EPSS

Cvelist•added 2026/06/26 2:52 p.m.•30 views

CVE-2026-54834 WordPress Object Cache 4 everyone plugin <= 2.3.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone = 2.3.2 versions...

7.5CVSS0.00294EPSS

OSV•added 2026/06/23 5:17 p.m.•3 views

UBUNTU-CVE-2026-56114

dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6makemessage in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTIONPDEXCLUDE option body...

6.5CVSS6AI score0.00175EPSS

Exploits0References2

Chainguard•added 2026/06/23 8:17 a.m.•9 views

GHSA-6WX8-W4F5-WWCR vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-rails, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-rails, kube-fluentd-operator...

AstraLinux•added 2026/06/19 11:10 a.m.•3 views

Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.2.0 to 3.2.4, the GVCP dissector could enter an infinite loop. This issue was addressed in the epan/dissectors/packet-gvcp.c file by ensuring that the offset increased in all situations...

7.5CVSS7.2AI score0.03101EPSS