CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

35720 matches found

CNNVD•added 2026/05/03 12:00 a.m.•14 views

yudao-cloud 注入漏洞

Yudao-Cloud is a backend management system developed by YunaiV’s individual developer. Versions of Yudao-Cloud prior to 2026.01 contained a injection vulnerability. This vulnerability originated from the function getDataBySQL in the file...

6.5CVSS6.7AI score0.00196EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/03 12:00 a.m.•19 views

PT-2026-36722

Name of the Vulnerable Software and Affected Versions JD Cloud JDCOS version 4.5.1.r4518 Description A flaw in the Service Interface component allows remote command injection. The issue exists within the set iptv info function of the '/jdcap' file, where improper handling of the vid argument...

6.5CVSS6.8AI score0.01158EPSS

SaveExploits0References8

Microsoft Secure•added 2026/05/02 3:06 a.m.•22 views

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

In this article 1. Vulnerability details 2. Mitigation and protection guidance 3. Microsoft Defender XDR detections 4. References 5. Learn more Microsoft Defender is investigating a high-severity local privilege escalation vulnerability CVE-2026-31431 affecting multiple major Linux distributions...

7.8CVSS6.5AI score0.99907EPSS

SaveExploits238

Microsoft Secure•added 2026/05/02 3:06 a.m.•23 views

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

7.8CVSS6.5AI score0.99907EPSS

SaveExploits238

Positive Technologies•added 2026/05/02 12:00 a.m.•25 views

PT-2026-36671

Name of the Vulnerable Software and Affected Versions Apache Polaris versions prior to 1.4.1 Description Changing the write.metadata.path table property via an ALTER TABLE settings change allows a user to bypass the commit-time branch intended to revalidate storage locations. This defect enables...

9.9CVSS5.8AI score0.00365EPSS

SaveExploits0References12

Positive Technologies•added 2026/05/02 12:00 a.m.•27 views

PT-2026-36670

Name of the Vulnerable Software and Affected Versions Apache Polaris version 1.4.0 Description Apache Polaris fails to properly escape namespace and table identifiers when constructing Common Expression Language CEL strings for Google Cloud Storage GCS Credential Access Boundaries CAB. This allow...

9.9CVSS5.8AI score0.00432EPSS

SaveExploits0References13

Tenable Nessus•added 2026/05/02 12:00 a.m.•31 views

Alibaba Cloud Linux 3 : 0087: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2026:0087)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0087 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-31431: In the Linux kernel, the following...

7.8CVSS6AI score0.99907EPSS

SaveExploits238References2