CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

248 matches found

Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API

Piwigo = 16.3.0 contains an information disclosure vulnerability caused by the pwg.history.search API method lacking adminonly restriction, letting unauthenticated users access full browsing history, exploit requires no authentication id: CVE-2026-27833 info: name: Piwigo 16.3.0 - Unauthenticated...

7.5CVSS5.9AI score0.01522EPSS

Exploits1References2

AstraLinux•added 2026/06/19 11:10 a.m.•9 views

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved by adding additional restrictions on CSS compositing. This issue has been fixed in tvOS 15, watchOS 8, iOS 15, and iPadOS 15. Visiting a maliciously crafted website may reveal a user’s browsing history...

4.7CVSS5.8AI score0.01114EPSS

Exploits0References2

Cvelist•added 2026/04/03 9:34 p.m.•14 views

CVE-2026-27833 Piwigo: Unauthenticated Information Disclosure via pwg.history.search API

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in Piwigo is registered without the adminonly option, allowing unauthenticated users to access the full browsing history of all gallery visitors. This issue has been patched ...

7.5CVSS0.01522EPSS

Exploits1References3

ATTACKERKB•added 2026/04/03 9:34 p.m.•1 views

CVE-2026-27833

7.5CVSS5.8AI score0.01522EPSS

Exploits1References4Affected Software1

Malwarebytes•added 2025/11/13 12:51 p.m.•5 views

Are you paying more than other people? NY cracks down on surveillance pricing

When you search for a product online, you might think you're getting the same price as everyone else. Think again. Your price might be different based on everything from your location to what you've looked at online. Companies often use algorithms to set their prices that rely heavily on customer...

6.2AI score

Exploits0