CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

22874 matches found

ATTACKERKB•added 2026/06/26 8:36 p.m.•18 views

CVE-2026-50136

Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentials stored in a workspace datasource. The route is protected only by the recaptcha middleware and does not require...

7.4CVSS5.8AI score0.0029EPSS

SaveExploits1References2Affected Software1

Chainguard•added 2026/06/26 8:23 p.m.•25 views

GHSA-VWM4-62GF-X745 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

5.7AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•21 views

CVE-2026-54898 vulnerabilities

2.1CVSS5.8AI score0.00167EPSS

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•16 views

CVE-2026-54899 vulnerabilities

6.3CVSS5.8AI score0.00428EPSS

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•19 views

GHSA-FM7P-MPRW-WJM9 vulnerabilities

5.7AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•20 views

CVE-2026-54903 vulnerabilities

6.3CVSS5.8AI score0.00428EPSS

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•25 views

GHSA-9CV6-QCJW-4GRX vulnerabilities

5.7AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•30 views

GHSA-475M-PH3X-64GP vulnerabilities

5.7AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•14 views

GHSA-3M6Q-JJ5J-38C9 vulnerabilities

5.7AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•24 views

GHSA-9PPP-W3G4-FH4Q vulnerabilities

5.7AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•27 views

GHSA-3V45-F3VH-WG7M vulnerabilities

5.7AI score

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•29 views

GHSA-2CW7-V8FF-P88R vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset...

5.7AI score

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•22 views

CVE-2026-54500 vulnerabilities

5.3CVSS5.8AI score0.00198EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•23 views

CVE-2026-54896 vulnerabilities

2.1CVSS5.8AI score0.00166EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•21 views

CVE-2026-54901 vulnerabilities

6.3CVSS5.8AI score0.00428EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•20 views

GHSA-FM7P-MPRW-WJM9 vulnerabilities

5.7AI score

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•20 views

CVE-2026-54897 vulnerabilities

2.1CVSS5.8AI score0.00167EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•37 views

GHSA-VWM4-62GF-X745 vulnerabilities

5.7AI score

SaveExploits0

CVE•added 2026/06/26 6:59 p.m.•58 views

CVE-2026-52782

OpenProject versions prior to 17.3.3 and 17.4.1 are affected by an IDOR in /projects//settings/project_storages/ via PATCH parameter storages_project_storage[project_folder_id], allowing a project-admin to hijack another project’s managed Nextcloud/OneDrive folder on the same storage. The vulnera...

9.9CVSS5.7AI score0.00454EPSS

SaveExploits0References1

CVE•added 2026/06/26 6:56 p.m.•42 views

CVE-2026-52784

CVE-2026-52784 (OpenProject) is a CSRF vulnerability in OpenProject’s web UI. The issue allows CSRF on a user-targeted action via POST to /users/:id with the parameter user[admin], enabling unauthorized state changes without user interaction. Affected software versions are prior to 17.3.3 and 17....

8.8CVSS5.8AI score0.00241EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by