Lucene search
+L

6735 matches found

CVE
CVE
•added 2026/02/27 7:11 p.m.•58 views

CVE-2026-22717

CVE-2026-22717 is an out-of-bounds read vulnerability in VMware Workstation

2.7CVSS5.7AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/27 3:16 p.m.•27 views

CVE-2026-3327

Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...

4.8CVSS0.00412EPSS
SaveExploits0References1
CBLMariner
CBLMariner
•added 2026/02/27 3:07 p.m.•22 views

CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11

CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11. A patched version of the package is available...

7CVSS7AI score0.00268EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/02/27 2:09 p.m.•45 views

CVE-2026-3327 Authenticated DatoCMS Web Previews Plugin Iframe Injection

Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...

4.8CVSS0.00412EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/27 2:09 p.m.•12 views

CVE-2026-3327 Authenticated DatoCMS Web Previews Plugin Iframe Injection

Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...

4.8CVSS6.1AI score
SaveExploits0References3
Patchstack
Patchstack
•added 2026/02/27 8:33 a.m.•14 views

WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pizza House versions = 1.4.0...

9.8CVSS6AI score0.00628EPSS
SaveExploits0Affected Software1
CBLMariner
CBLMariner
•added 2026/02/27 4:00 a.m.•34 views

CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

9.3CVSS7.9AI score0.00229EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2026/02/27 4:00 a.m.•13 views

CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2026/02/27 2:30 a.m.•15 views

CVE-2026-21863 affecting package valkey for versions less than 8.0.7-1

CVE-2026-21863 affecting package valkey for versions less than 8.0.7-1. An upgraded version of the package is available that resolves this issue...

7.5CVSS7.1AI score0.00793EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2026/02/27 2:30 a.m.•22 views

CVE-2026-27211 affecting package cloud-hypervisor for versions less than 48.0.246-2

CVE-2026-27211 affecting package cloud-hypervisor for versions less than 48.0.246-2. A patched version of the package is available...

10CVSS5.8AI score0.00618EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/02/27 12:00 a.m.•30 views

PT-2026-22377

Name of the Vulnerable Software and Affected Versions @fastify/middie versions prior to 9.2.0 Description A flaw exists in @fastify/middie that can lead to authentication or authorization bypass when path-scoped middleware is used, such as with app.use'/secret', auth. This occurs when Fastify...

8.2CVSS5.8AI score0.00517EPSS
SaveExploits0References10
CBLMariner
CBLMariner
•added 2026/02/26 8:53 p.m.•13 views

CVE-2026-24882 affecting package gnupg2 for versions less than 2.4.0-3

CVE-2026-24882 affecting package gnupg2 for versions less than 2.4.0-3. A patched version of the package is available...

8.4CVSS5.9AI score0.00444EPSS
SaveExploits1
Patchstack
Patchstack
•added 2026/02/26 10:36 a.m.•19 views

WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Welldone versions = 2.4...

8.1CVSS5.9AI score0.00578EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/02/25 12:32 p.m.•19 views

WordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Sweet Jane versions = 1.2...

8.1CVSS5.9AI score0.00524EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2026/02/25 12:27 a.m.•14 views

SUSE CVE-2026-2765

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

8.8CVSS8AI score0.0061EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/02/25 12:27 a.m.•14 views

SUSE CVE-2026-2780

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

6.3CVSS8AI score0.0044EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/02/25 12:27 a.m.•15 views

SUSE CVE-2026-2781

Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35...

6.3CVSS8.1AI score0.00572EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/02/25 12:27 a.m.•14 views

SUSE CVE-2026-2784

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

6.3CVSS8AI score0.00549EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/02/25 12:27 a.m.•18 views

SUSE CVE-2026-2785

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

6.3CVSS7.9AI score0.00476EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/02/25 12:27 a.m.•16 views

SUSE CVE-2026-2790

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

4.2CVSS8AI score0.00235EPSS
SaveExploits0References14
Rows per page
Query Builder