CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

350 matches found

CVE•added 2026/02/25 1:33 a.m.•24 views

CVE-2026-2914

CVE-2026-2914 affects CyberArk Endpoint Privilege Manager Agent

8.5CVSS5.3AI score0.00146EPSS

Exploits0References2Affected Software1

ATTACKERKB•added 2026/02/25 1:33 a.m.•3 views

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS5.3AI score0.00146EPSS

Exploits0References3Affected Software1

Positive Technologies•added 2026/02/25 12:0 a.m.•13 views

PT-2026-21829

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower Description The CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower have a condition that may allow unauthorized privilege elevation through CyberArk elevati...

8.5CVSS6AI score0.00146EPSS

Exploits0References6

Tenable Nessus•added 2026/01/20 12:0 a.m.•5 views

MiracleLinux 8 : firefox-115.8.0-1.el8_9.ML.1 (AXSA:2024-7560:09)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7560:09 advisory. Mozilla: Out-of-bounds memory read in networking channels CVE-2024-1546 Mozilla: Alert dialog could have been spoofed on another site CVE-2024-1547...

8.1CVSS8.5AI score0.00937EPSS

Exploits1References9

RedhatCVE•added 2026/01/09 11:15 a.m.•10 views

CVE-2021-0931

In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-...

5.5CVSS5.8AI score0.0014EPSS

Exploits0References1

OSV•added 2025/12/11 8:15 a.m.•2 views

UBUNTU-CVE-2025-12734

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to, under certain conditions, render content in dialogs to other users by injecting malicious HTML content into...

3.5CVSS5.8AI score0.00226EPSS

Exploits0References2