CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

32029 matches found

VulnCheck KEV•added 2025/10/07 12:00 a.m.•16 views

VulnCheck KEV: CVE-2025-5947

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the servicefinderswitchback function...

9.8CVSS5.8AI score0.04469EPSS

SaveIn wildExploits2References3

Tenable Nessus•added 2025/10/07 12:00 a.m.•5 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: curl (UTSA-2025-987465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987465 advisory. 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear...

7.5CVSS6.3AI score0.01395EPSS

SaveExploits1References4

RedhatCVE•added 2025/10/06 9:05 p.m.•12 views

CVE-2025-40646

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...

5.1CVSS4.8AI score0.00175EPSS

SaveExploits0References1

Redos•added 2025/10/06 12:00 a.m.•9 views

ROS-20251006-02

A vulnerability in the curl program is related to boundary conditions when reading the cookie path. Exploitation The vulnerability could allow a remote attacker to cause a denial of service...

7.5CVSS6.9AI score0.01395EPSS

SaveExploits1

Tenable Nessus•added 2025/10/06 12:00 a.m.•5 views

RockyLinux 10 : libsoup3 (RLSA-2025:8128)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8128 advisory. libsoup: Denial of Service attack to websocket server CVE-2025-32049 libsoup: Denial of service in server when client requests a large amount of...

7.5CVSS6.4AI score0.00857EPSS

SaveExploits0References9

GithubExploit•added 2025/10/05 1:15 p.m.•241 views

Exploit for CVE-2025-56132

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerab...

7.3CVSS6.4AI score0.00695EPSS

SaveExploits1