CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4344 matches found

Vulnrichment•added 2026/07/23 9:24 a.m.•16 views

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

8.2CVSS5.8AI score0.00314EPSS

SaveExploits0References1

Cvelist•added 2026/07/23 8:26 a.m.•83 views

CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS0.00663EPSS

SaveExploits9References1

Cvelist•added 2026/07/23 7:44 a.m.•46 views

CVE-2026-16287 Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0...

7.8CVSS0.00842EPSS

SaveExploits0References1

Tenable Nessus•added 2026/07/23 12:00 a.m.•19 views

Oracle Primavera Gateway (July 2026 CPU)

The version of Primavera Gateway installed on the remote host is affected by a vulnerability as referenced in the July 2026 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin Apache Log4j. Supported versions that are affected are...

7.5CVSS7.1AI score0.00691EPSS

SaveExploits0References3

Positive Technologies•added 2026/07/23 12:00 a.m.•31 views

PT-2026-64122

Jobs webhook SSRF protection bypass via DNS rebinding Summary PraisonAI's Async Jobs API validates webhook url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network...

7.2CVSS6AI score0.00187EPSS

SaveExploits0References6

Positive Technologies•added 2026/07/23 12:00 a.m.•31 views

PT-2026-63970

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...

6.5CVSS5.3AI score0.00224EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:09 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•23 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00338EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•18 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00317EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•26 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00524EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:02 p.m.•22 views

NPM: Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

NPM: Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname vulnerability discovered by ? in WordPress Npm next versions = 12.0.0, 15.5.21...

8.3CVSS5.5AI score0.00414EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:02 p.m.•18 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.4AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.4AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•17 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +234 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...

6.3CVSS5.4AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•15 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +234 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

6.3CVSS5.4AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 10:59 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +961 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)

8.2CVSS5.4AI score0.00856EPSS

SaveExploits0

Debian CVE•added 2026/07/22 5:06 p.m.•35 views

CVE-2026-64834

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...

8.7CVSS7.1AI score0.00727EPSS

SaveExploits0

osv_ubuntu•added 2026/07/22 2:17 p.m.•15 views

UBUNTU-CVE-2026-55708

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...

3.1CVSS5.8AI score0.0016EPSS

SaveExploits0References3

osv_ubuntu•added 2026/07/22 2:17 p.m.•31 views

UBUNTU-CVE-2026-32665

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC DoQ is enabled, the first two bidirectional streams on a new QUIC connection streamid 0 and 4 bypass the per-stream 'quic-size' gate entirely, and large input buffers are allocated later, after only the 2-byte...

7.5CVSS5.8AI score0.00285EPSS

SaveExploits0References3

osv_ubuntu•added 2026/07/22 2:17 p.m.•15 views

UBUNTU-CVE-2026-50046

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS DoT forwarded queries is tied to a struct's 'servicedquery' lifetime but also referenced by another struct 'waitingtcp'. When the owning struct is jostled out of the mesh while the DoT TCP stream is...

5.9CVSS5.9AI score0.00237EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by