CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1337 matches found

OSV•added 2025/12/05 6:16 a.m.•6 views

CVE-2016-20023

In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided...

6.5CVSS5.8AI score0.003EPSS

Exploits0References2

Positive Technologies•added 2025/12/03 12:0 a.m.•7 views

PT-2025-48816

Name of the Vulnerable Software and Affected Versions ERPNext version 15.83.2 Frappe Framework version 15.86.0 Description Improper validation of uploaded SVG avatar images allows attackers to embed malicious JavaScript. The payload executes when an administrator clicks the image link to view the...

9CVSS5.8AI score0.00296EPSS

Exploits0References9

RedhatCVE•added 2025/11/20 9:36 p.m.•5 views

CVE-2025-64764

Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component templates. This issue has been patched in version 5.15.8...

7.1CVSS6.3AI score0.00456EPSS

Exploits1References1

Positive Technologies•added 2025/11/19 12:0 a.m.•10 views

PT-2025-47490

Name of the Vulnerable Software and Affected Versions Astro versions prior to 5.15.9 Description Astro, a web framework, has an issue when using the Cloudflare adapter @astrojs/cloudflare with output set to 'server'. The image optimization endpoint '/ image' includes a flaw in the isRemoteAllowed...

6.1CVSS5.7AI score0.00223EPSS

Exploits1References9

GithubExploit•added 2025/11/09 4:38 p.m.•214 views

adaptivewaf

Adaptive Web Application Firewall WAF - v1 Rule-Based A hob...

7.7AI score

Exploits0

GithubExploit•added 2025/11/02 3:8 p.m.•110 views

exploit

It is an offensive tool for web applications. The repository con...

8.2AI score

Exploits0

CVE•added 2025/10/16 5:39 p.m.•15 views

CVE-2025-62407

CVE-2025-62407 affects the Frappe web framework. An open redirect was possible on the login page via the redirect parameter for versions prior to 14.98.0 and 15.83.0 . The issue is fixed in those respective versions (14.98.0 and 15.83.0). As described in connected sources, upgrading to 14.98.0 or...

6.1CVSS6.3AI score0.0024EPSS

Exploits0References1Affected Software1

RedHat Linux•added 2025/10/15 4:16 p.m.•6 views

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...

9.9CVSS7.2AI score0.65838EPSS

Exploits5References4