CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

158447 matches found

Tenable Nessus•added 2026/06/03 12:0 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-28902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5,...

6.5CVSS5.4AI score0.003EPSS

Exploits0References2

Debian CVE•added 2026/06/03 12:0 a.m.•10 views

CVE-2026-48019

CRLF injection in default email rule...

5.8AI score0.00048EPSS

Exploits0

Tenable Nessus•added 2026/06/03 12:0 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-45887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Fix memleak of newsk in unixstreamconnect. When preparepeercred fails in unixstreamconnect, unixreleasesock is not called for newsk, and the memory is...

5.5CVSS5.8AI score0.00198EPSS

Exploits0References2

Oracle linux•added 2026/06/03 12:0 a.m.•8 views

expat security update

2.5.0-2 - Fix CVE-2026-45186 - Resolves: RHEL-177979...

7.5CVSS5.8AI score0.00311EPSS

Exploits1

RedHat Linux•added 2026/06/02 10:29 p.m.•14 views

php: denial of service via DOMNode::C14N()

A flaw was found in PHP. The DOMNode::C14N method may incorrectly process XML data due to the improper removal of an xmlns attribute from the underlying libxml2 data structure, corrupting the linked list representing the XML document and causing an infinite loop. This issue can lead to excessive...

7.5CVSS5.7AI score0.00269EPSS

Exploits0References5

RedHat Linux•added 2026/06/02 10:29 p.m.•11 views

php: signed integer overflow in metaphone()

A flaw was found in PHP. The metaphone function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. When an input string is longer than 2,147,483,647 bytes, a signed integer overflow can occur, leading to undefined behavior and an...

7.5CVSS5.8AI score0.00241EPSS

Exploits0References5