CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6428 matches found

Positive Technologies•added 2025/10/06 12:00 a.m.•22 views

PT-2025-40946

Name of the Vulnerable Software and Affected Versions YoSmart YoLink MQTT broker versions through 2025-10-02 Description The YoLink MQTT broker does not adequately enforce authorization controls, which can lead to cross-account attacks. An attacker who obtains device IDs can remotely operate...

4.9CVSS6.6AI score0.00281EPSS

SaveExploits0References7

BDU FSTEC•added 2025/10/06 12:00 a.m.•19 views

Yaml-cpp Heap Buffer Overflow DoS

The vulnerability of the Token&Scanner::peek function in the scanner.cpp component of the YAML handling library for C++ Yaml-cpp is related to the insufficient use of the assert function. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

7.5CVSS7.5AI score0.02249EPSS

SaveExploits1References7Affected Software2

BDU FSTEC•added 2025/10/06 12:00 a.m.•12 views

Oracle E-Business Suite Concurrent Processing Code Execution

The vulnerability of Oracle’s Concurrent Processing function in the Oracle E-Business Suite lies in the deficiencies of the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HTTP request...

10CVSS7.7AI score0.99732EPSS

SaveExploits16References2Affected Software1

Cvelist•added 2025/10/04 2:24 a.m.•33 views

CVE-2025-10746 Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...

6.5CVSS0.00273EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2025/10/04 12:00 a.m.•4 views

CVE-2025-39942: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remainingdatalength respects maxfragmentedrecvsize This is inspired by the check for dataoffset + datalength...

7.5CVSS6.5AI score0.00282EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2025/10/04 12:00 a.m.•4 views

CVE-2025-39933: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength This is inspired by the related server fixes...

9.4CVSS5.9AI score0.0021EPSS

SaveExploits0References3