CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10 matches found

RedhatCVE•added 2026/03/26 2:59 p.m.•1 views

CVE-2026-31857

Craft is a content management system CMS. Prior to 5.9.9 and 4.17.4, a Remote Code Execution vulnerability exists in the Craft CMS 5 conditions system. The BaseElementSelectConditionRule::getElementIds method passes user-controlled string input through renderObjectTemplate -- an unsandboxed Twig...

9.3CVSS5.9AI score0.00138EPSS

Exploits0References1

ATTACKERKB•added 2026/03/11 5:30 p.m.•1 views

CVE-2026-31857

9.3CVSS5.9AI score0.00138EPSS

Exploits0References3Affected Software1

OSV•added 2026/03/11 2:56 p.m.•2 views

GHSA-FP5J-J7J4-MCXC CraftCMS has an RCE vulnerability via relational conditionals in the control panel

A Remote Code Execution vulnerability exists in the Craft CMS 5 conditions system. The BaseElementSelectConditionRule::getElementIds method passes user-controlled string input through renderObjectTemplate -- an unsandboxed Twig rendering function with escaping disabled. Any authenticated Control...

9.3CVSS5.9AI score0.00138EPSS

Exploits0References4

EUVD•added 2025/10/07 12:30 a.m.•3 views

EUVD-2017-3094

Malware in sbrugna...

8.8CVSS9.1AI score0.00185EPSS

Exploits0References3

CNVD•added 2017/07/21 12:0 a.m.•1 views

GLPI 'condition rule' SQL Injection Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. An SQL injection vulnerability exists in the condition rule field in GLP...

8.8CVSS9.6AI score0.00185EPSS

Exploits0References1