CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

36052 matches found

Tenable Nessus•added 2026/01/13 12:00 a.m.•8 views

KB5073450: Windows Server version 23H2 Security Update (January 2026)

The remote Windows host is missing security update 5073450. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

9.8CVSS8.1AI score0.19801EPSS

SaveExploits8References80

Tenable Nessus•added 2026/01/13 12:00 a.m.•7 views

MiracleLinux 9 : cloud-init-24.4-4.el9_6.3.ML.1 (AXSA:2025-10645:08)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10645:08 advisory. cloud-init: Cloud init permissions flaw CVE-2024-6174 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...

8.8CVSS5.5AI score0.00227EPSS

SaveExploits0References2

Tenable Nessus•added 2026/01/13 12:00 a.m.•7 views

KB5073723: Windows 10 version 1809 / Windows Server 2019 Security Update (January 2026)

The remote Windows host is missing security update 5073723. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

9.8CVSS8.1AI score0.19801EPSS

SaveExploits8References73

IBM Security Bulletins•added 2026/01/12 5:35 p.m.•15 views

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2025.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF006 and 25.0.0-IF003. Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in...

9.1CVSS6.5AI score0.54862EPSS

SaveExploits8Affected Software2

Trend Micro Simply Security•added 2026/01/12 12:00 a.m.•13 views

Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response

Threat actors exploited Cloudflare's free-tier infrastructure and legitimate Python environments to deploy the AsyncRAT remote access trojan, demonstrating advanced evasion techniques that abuse trusted cloud services for malicious operations...

7.1AI score

SaveExploits0