CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1326 matches found

Vulnrichment•added 2026/09/07 8:07 a.m.•10 views

CVE-2026-14297 The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler `memcpy`s the entire attacker-supplied ATT write value into a fixed 20-byte BSS buffer.

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service CGMS Record Access Control Point RACP write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on...

8.7CVSS6.1AI score0.00155EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-85654: Improper Neutralization of Special Elements Used in a Template Engine

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

7.8CVSS6.5AI score0.00212EPSS

SaveExploits0References2

vulnersOsv•added 2026/09/01 5:02 p.m.•17 views

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83608 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83608 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498556...

8.7CVSS5.8AI score0.00612EPSS

SaveExploits0

vulnersOsv•added 2026/09/01 5:01 p.m.•16 views

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83619 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83619 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498558...

8.7CVSS7.2AI score0.00524EPSS

SaveExploits0

Tenable Nessus•added 2026/08/26 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-74742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is onl...

7.5CVSS5.8AI score0.0063EPSS

SaveExploits0References2

EUVD•added 2026/08/21 2:36 p.m.•16 views

EUVD-2026-63981

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...

5.3CVSS6.4AI score0.00382EPSS

SaveExploits0References1

AlpineLinux•added 2026/08/21 2:36 p.m.•16 views

CVE-2026-48754

5.3CVSS6.4AI score0.00382EPSS

SaveExploits0

Cvelist•added 2026/08/21 2:36 p.m.•37 views

CVE-2026-48754 Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}

5.3CVSS0.00382EPSS

SaveExploits0References1

vulnersOsv•added 2026/08/20 6:35 p.m.•17 views

@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54155 via node-opcua (>=2.1.9, <=2.164.2)

node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...

7.7CVSS5.4AI score0.00424EPSS

SaveExploits0

Snyk•added 2026/08/18 8:51 p.m.•9 views

Missing Authorization

Overview lemur is a Certificate management and orchestration service Affected versions of this package are vulnerable to Missing Authorization in the POST /api/1/authorities process when the ADMINONLYAUTHORITYCREATION configuration is set to False. An attacker can gain unauthorized control over...

6.5CVSS5.9AI score0.00105EPSS

SaveExploits0References2

vulnersOsv•added 2026/08/17 5:32 p.m.•19 views

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-47698 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

9.8CVSS5.8AI score0.00971EPSS

SaveExploits0

OSV•added 2026/08/17 9:45 a.m.•9 views

OSEC-2026-17 Timing leak in NIST elliptic curves scalar multiplication

The scalar multiplication includes pre-computed tables for speedup introduced in mirage-crypto-ec 0.11.3. The lookup algorithm for these tables performs secret-dependent reads instead of scanning the entire table. Solution Instead of using the index n - 1, where n is secret-dependent, use i - 1, ...

5.9CVSS5.5AI score0.00332EPSS

SaveExploits0

RedhatCVE•added 2026/08/05 12:10 a.m.•13 views

CVE-2026-45809

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...

8.7CVSS5.8AI score0.00637EPSS

SaveExploits0References2