CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

107 matches found

RedhatCVE•added 2026/01/09 12:38 p.m.•11 views

CVE-2023-29974

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...

9.8CVSS7AI score0.01753EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 10:18 a.m.•6 views

CVE-2019-18839

FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP file...

9CVSS6.8AI score0.05436EPSS

Exploits3References1

RedhatCVE•added 2026/01/09 9:34 a.m.•11 views

CVE-2024-41107

The CloudStack SAML authentication disabled by default does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response...

8.1CVSS6.9AI score0.1776EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 8:49 a.m.•19 views

CVE-2021-22530

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authenticati...

9.9CVSS6.8AI score0.00215EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:20 a.m.•4 views

CVE-2024-2171

A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logourl' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The...

4.8CVSS4.8AI score0.00364EPSS

Exploits1References1

Veracode•added 2025/11/05 6:45 a.m.•7 views

Information Disclosure

com.liferay:com.liferay.portal.security.audit.event.generators.user.management is vulnerable to Information Disclosure. The vulnerability is due to audit events recording users’ password reminder answers in audit logs, which allows remote authenticated users to retrieve those answers via the audi...

6.9CVSS7AI score0.00328EPSS

Exploits0References6Affected Software1