CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4540 matches found

EUVD•added 2025/10/07 12:30 a.m.•7 views

EUVD-2008-7236

Malware in sbrugna...

6CVSS6.2AI score0.00898EPSS

SaveExploits0References3

EUVD•added 2025/10/07 12:30 a.m.•4 views

EUVD-2019-3890

Malware in sbrugna...

4.3CVSS4.7AI score0.01752EPSS

SaveExploits0References8

RedhatCVE•added 2025/10/04 11:53 a.m.•10 views

CVE-2025-9875

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS5AI score0.00225EPSS

SaveExploits0References1

Vulnrichment•added 2025/10/03 8:35 p.m.•4 views

CVE-2025-10696 OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list

OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...

7.1CVSS6.4AI score0.00205EPSS

SaveExploits1References2

Cvelist•added 2025/10/03 8:30 p.m.•15 views

CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection

The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...

7.1CVSS0.0034EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/03 8:30 p.m.•5 views

CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection

7.1CVSS7AI score0.0034EPSS

SaveExploits0References2

EUVD•added 2025/10/03 8:7 p.m.•6 views

EUVD-2025-27803