CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

51314 matches found

CNNVD•added 2026/05/12 12:00 a.m.•20 views

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows operating systems. There is a resource management vulnerability in Microsoft Win32k. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windo...

7CVSS5.8AI score0.00261EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/12 12:00 a.m.•21 views

PT-2026-40010

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS5.8AI score0.0017EPSS

SaveExploits0References2

CNNVD•added 2026/05/12 12:00 a.m.•17 views

Pingvin Share 授权问题漏洞

Pingvin Share is a self-hosted file sharing platform developed by Elias Schneider as an individual project. Versions of Pingvin Share from 1.14.1 to 1.16.2 have vulnerabilities related to authorization. These vulnerabilities stem from critical authentication bypass exploits, which could allow...

9.1CVSS5.9AI score0.00299EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/12 12:00 a.m.•17 views

PT-2026-40072

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...

9.8CVSS5.8AI score0.01563EPSS

SaveExploits2References71

Snyk•added 2026/05/11 9:00 p.m.•20 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

9.8CVSS6AI score0.02342EPSS

SaveExploits3References2

Snyk•added 2026/05/11 9:00 p.m.•20 views

Embedded Malicious Code

9.8CVSS6AI score0.02342EPSS

SaveExploits3References2

Cvelist•added 2026/05/11 8:08 p.m.•40 views

CVE-2026-28860

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A local attacker may be able to modify the state of the...

0.0038EPSS

SaveExploits0References8

Cvelist•added 2026/05/11 7:51 p.m.•46 views

CVE-2026-42883 Audiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/libraries/:id/download endpoint validates that the requesting user has access to the library specified in the URL path, but fetches downloadable items solely by attacker-provided IDs without constraining...

6.5CVSS0.00205EPSS

SaveExploits0References1

Cvelist•added 2026/05/11 6:00 p.m.•51 views

CVE-2026-45222 Summarize Insecure Daemon Configuration File Permissions

Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directory and file with default filesystem permissions that may be world-readable on Unix-like systems, allowing local attackers to read bearer tokens and API credentials stored in /.summarize/daemon.json...

6.9CVSS0.00098EPSS

SaveExploits0References3

OSV•added 2026/05/11 4:17 p.m.•6 views

CVE-2026-34091

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from before 1.43.7, 1.44.4, 1.45.2...

7.5CVSS5.9AI score

SaveExploits0References1

vulnersOsv•added 2026/05/11 4:12 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44572 Source advisory:...

5.9CVSS4.7AI score0.00284EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:12 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)

5.9CVSS4.7AI score0.00284EPSS

SaveExploits0

Snyk•added 2026/05/11 3:59 p.m.•9 views

Privilege Dropping / Lowering Errors

Overview Affected versions of this package are vulnerable to Privilege Dropping / Lowering Errors in the metrics exporter. An attacker can gain PostgreSQL superuser privileges and execute arbitrary OS commands as the postgres user inside the primary pod by exploiting the ability to plant shadow...

9.9CVSS6.7AI score0.0048EPSS

SaveExploits0References3

vulnersOsv•added 2026/05/11 3:57 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44581 via next (>=16.0.0, <=16.2.4)

4.7CVSS4.9AI score0.00222EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:57 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44581 via next (>=16.0.0, <=16.2.4)

4.7CVSS4.9AI score0.00222EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)

3.7CVSS4.7AI score0.00215EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•3 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1370 more potentially affected by CVE-2026-44579 via next (>=15.0.0, <=15.5.15)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44579 Source advisory: SNYK:JS-NEXT-16638678...

7.5CVSS7.3AI score0.00746EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44577 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.3AI score0.00739EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:54 p.m.•6 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS5.5AI score0.00295EPSS

SaveExploits0

Vulnrichment•added 2026/05/11 3:00 p.m.•8 views

CVE-2026-34092 Block UI elements in 'tools'-sidebar shows presence of an autoblocked IP

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue affects MediaWiki: from before 1.43.7, 1.44.4, 1.45.2...

2.1CVSS5.8AI score0.00237EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by