CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4362 matches found

vulnersOsv•added 2026/07/24 2:07 p.m.•12 views

actix-remote (0.1.0), agnostic (>=0.2.5, <=0.2.6) +272 more potentially affected by CVE-2026-25800 via quinn-proto (>=0.2.0, <=0.11.9)

quinn-proto CARGO version =0.2.0, =0.2.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.5.0, =2.0.0, =0.2.3, =0.2.11 and more Source cves: CVE-2026-25800 Source advisory: OSV:GHSA-4W2J-M93H-CJ5J...

7.5CVSS5.8AI score0.00609EPSS

SaveExploits0

vulnersOsv•added 2026/07/23 7:36 p.m.•13 views

@0xmike/web-kit (>=0.0.6, <=0.1.1), @acmekit/acmekit (>=2.13.1, <=2.13.94) +284 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)

react-router-dom NPM version =6.30.2, =0.0.6, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =1.4.0, =0.0.1, =1.2.0, =0.1.0, =0.0.6, =2.0.1, =4.1.0 - @automattic/data-stores 3.2.2 - @automattic/domain-search 1.1.0 - @automattic/jetpack-ai-calypso 2.1.0 and more Source cves: CVE-2026-53668 Source advisory:...

6.9CVSS5.8AI score0.0028EPSS

SaveExploits0

Patchstack•added 2026/07/23 7:34 p.m.•12 views

NPM: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

NPM: React Router: Arbitrary Constructor Injection via deserializeErrors in React Router SSR Hydration vulnerability discovered by ? in WordPress Npm react-router versions = 6.4.0, 7.18.0...

6.1CVSS5.4AI score0.00305EPSS

SaveExploits0References6Affected Software1

EUVD•added 2026/07/23 7:00 p.m.•21 views

EUVD-2026-48372

FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput allocates the...

7.8CVSS6.2AI score0.00125EPSS

SaveExploits0References3

IBM Security Bulletins•added 2026/07/23 4:44 p.m.•20 views

Security Bulletin: Multiple vulnerabilities in IBM Desktop App

Summary Multiple vulnerabilities were addressed in IBM Aspera Desktop App v1.1.0. Vulnerability Details CVEID:CVE-2026-11980 DESCRIPTION: IBM Aspera Desktop App can allow arbitrary code execution by loading DLL files at start-up. CWE:CWE-242: Use of Inherently Dangerous Function CVSS Source: IBM...

9.3CVSS6.3AI score0.00304EPSS

SaveExploits0Affected Software4

Cvelist•added 2026/07/23 4:38 p.m.•43 views

CVE-2026-65761 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

9.3CVSS0.00928EPSS

SaveExploits2References2

NVD•added 2026/07/23 12:18 p.m.•12 views

CVE-2026-65475

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...

6.5CVSS0.00224EPSS

SaveExploits0References1

EUVD•added 2026/07/23 11:46 a.m.•19 views

EUVD-2026-48248

Cross-Site Request Forgery CSRF vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0...

7.1CVSS5.2AI score0.00128EPSS

SaveExploits0References1

Vulnrichment•added 2026/07/23 9:24 a.m.•9 views

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

8.2CVSS5.2AI score0.00314EPSS

SaveExploits0References1

Cvelist•added 2026/07/23 8:26 a.m.•74 views

CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS0.15989EPSS

SaveExploits7References1

Tenable Nessus•added 2026/07/23 12:00 a.m.•15 views

Oracle Primavera Gateway (July 2026 CPU)

The version of Primavera Gateway installed on the remote host is affected by a vulnerability as referenced in the July 2026 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin Apache Log4j. Supported versions that are affected are...

7.5CVSS7.1AI score0.00691EPSS

SaveExploits0References3

vulnersOsv•added 2026/07/22 11:09 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00872EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00336EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00351EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00531EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:02 p.m.•14 views

NPM: Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

NPM: Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname vulnerability discovered by ? in WordPress Npm next versions = 12.0.0, 15.5.21...

8.3CVSS5.3AI score0.00837EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00837EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...

6.3CVSS5.8AI score0.00675EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00675EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•11 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

6.3CVSS5.8AI score0.00675EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by