CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1962 matches found

Positive Technologies•added 2026/06/11 12:00 a.m.•43 views

PT-2026-48751

Unauthenticated Cross Site Scripting XSS in WP Google Review Slider = 18.0 versions...

6.3CVSS5.1AI score0.00251EPSS

SaveExploits0References3

Tenable Nessus•added 2026/06/11 12:00 a.m.•21 views

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : strongSwan vulnerability (USN-8407-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8407-1 advisory. Elliott Childre discovered that strongSwan incorrectly handled the cloning of certain identities. A remote attacker could use this...

7.5CVSS6AI score0.00416EPSS

SaveExploits0References2

CVE•added 2026/06/10 10:07 p.m.•254 views

CVE-2026-53464

CVE-2026-53464 (ImageMagick) : A memory leak in the wand option parser occurs when invalid arguments are provided (pre-7.1.2-25). The issue is triggered locally by malformed wand options and results in a "Memory leak" with low attack complexity and no user interaction. The advisory states it has ...

4CVSS4.9AI score0.00154EPSS

SaveExploits0References1Affected Software1

osv_cve•added 2026/06/10 10:05 p.m.•23 views

CVE-2026-53463 ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched in versions 6.9.13-50 and 7.1.2-25...

4.3CVSS4.8AI score0.00315EPSS

SaveExploits0References3

Circl•added 2026/06/10 5:44 a.m.•29 views

CVE-2025-66280

creationtimestamp| type| source ---|---|--- 2026-06-10 05:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvyymqodc2p 2026-06-17 12:00:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...

7.2CVSS5.8AI score0.00436EPSS

SaveExploits0References3

CNNVD•added 2026/06/09 12:00 a.m.•33 views

Microsoft Windows Application Identity (AppID) Subsystem buffer error vulnerability

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. Microsoft Windows has a buffer error vulnerability. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows 11 Version...

5.5CVSS5.9AI score0.00404EPSS

SaveExploits0References1

RedhatCVE•added 2026/06/07 12:43 a.m.•53 views

CVE-2026-46400

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.0.0, the file upload functionality in HAXCMS PHP only validates file extensions using a regex pattern without checking the actual file content or MIME type. This allows attacker...

8.7CVSS6.2AI score0.00599EPSS

SaveExploits0References1

GithubExploit•added 2026/06/06 12:04 p.m.•129 views

offensive-claude-490

Offensive Security Research Config for Claude Code !TIP...

6.1AI score

SaveExploits0

RedhatCVE•added 2026/06/05 7:49 p.m.•32 views

CVE-2026-49318

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...

2.4CVSS5.9AI score0.00204EPSS

SaveExploits0References1