CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

33908 matches found

Tenable Nessus•added 2026/05/18 12:0 a.m.•13 views

Alibaba Cloud Linux 3 : 0102: openssh (ALINUX3-SA-2026:0102)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0102 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-35385: In OpenSSH before 10.3, a...

8.1CVSS6.1AI score0.00289EPSS

Exploits0References6

Tenable Nessus•added 2026/05/18 12:0 a.m.•29 views

Alibaba Cloud Linux 3 : 0113: python3 (ALINUX3-SA-2026:0113)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0113 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-4786: Mitgation ofCVE-2026-4519 w...

9.1CVSS7AI score0.00517EPSS

Exploits0References3

GithubExploit•added 2026/05/17 1:31 a.m.•154 views

Exploit for CVE-2026-0265

CVE-2026-0265 Risk Checker for Palo Alto PAN-OS A Python script...

9.2CVSS5.9AI score0.0044EPSS

Exploits3

Veracode•added 2026/05/16 5:35 a.m.•7 views

Information Exposure

Spring Cloud Config is vulnerable to Information Exposure. The vulnerability is due to improper validation of requests when using Google Secrets Manager as a backend, which allows an attacker to craft requests that expose secrets from unintended GCP projects...

7.5CVSS5.2AI score0.0038EPSS

Exploits0References7Affected Software2

Veracode•added 2026/05/16 5:33 a.m.•12 views

Race Condition

Spring Cloud Config Server is vulnerable to Race Condition. The vulnerability is due to a Time-of-Check Time-of-Use TOCTOU issue in handling the Git repository base directory spring.cloud.config.server.git.basedir, where attackers may manipulate filesystem state between validation and use,...

8.1CVSS5.8AI score0.0022EPSS

Exploits0References3Affected Software1

Veracode•added 2026/05/16 5:33 a.m.•13 views

Secret Key Exposure

Pyroscope is vulnerable to Secret Key Exposure. The vulnerability is due to improper exposure of Tencent COS storage backend configuration values through the Pyroscope API, allowing attackers with API access to retrieve the secretkey used for cloud storage authentication...

9.1CVSS5.8AI score0.00337EPSS

Exploits0References7Affected Software1

Veracode•added 2026/05/16 5:29 a.m.•11 views

Improper Access Control

Rancher is vulnerable to Improper Access Control. The vulnerability is due to missing authorization checks when handling cloud-credential IDs, which allows an attacker to make unauthorized requests to cloud providers using attached credentials...

9.9CVSS7.2AI score0.00832EPSS

Exploits0References4Affected Software1

GithubExploit•added 2026/05/16 1:52 a.m.•75 views

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-vuln-demo Intentionally vulnerable demo image for Sys...

10CVSS7AI score0.99999EPSS

Exploits347