CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

13234 matches found

Vulnrichment•added 2026/02/27 9:04 p.m.•14 views

CVE-2026-28355 "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting

Canarytokens help track activity and actions on a network. Versions prior to sha-7ff0e12 have a Self Cross-Site Scripting vulnerability in the "PWA" Canarytoken, whereby the Canarytoken's creator can attack themselves or someone they share the link with. The creator of a PWA Canarytoken can inser...

5.3CVSS5.8AI score0.00409EPSS

SaveExploits0References1

attackerkb•added 2026/02/27 9:04 p.m.•16 views

CVE-2026-28355

5.3CVSS6AI score0.00409EPSS

SaveExploits0References2

CVE•added 2026/02/27 9:04 p.m.•47 views

CVE-2026-28355

The CVE-2026-28355 entry covers a Self Cross-Site Scripting (XSS) vulnerability in the Canarytokens “PWA” Canarytoken. Affected component is the title field of the PWA token; versions prior to sha-7ff0e12 allow the creator to inject JavaScript that executes when the installation page is visited b...

5.3CVSS5.8AI score0.00409EPSS

SaveExploits0References1

Cvelist•added 2026/02/27 9:04 p.m.•57 views

CVE-2026-28355 "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting

5.3CVSS0.00409EPSS

SaveExploits0References1

Snyk•added 2026/02/27 9:01 p.m.•5 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the container query parameter in GET /api/beszel/containers/logs and GET /api/beszel/containers/info endpoints, which is passed without validation to the agent and interpolated directly into Docker API URLs. An...

7.1CVSS7.9AI score0.00545EPSS

SaveExploits1References2

Snyk•added 2026/02/27 9:01 p.m.•13 views

Directory Traversal

7.1CVSS7.9AI score0.00545EPSS

SaveExploits1References2

osv_ghsa•added 2026/02/27 9:01 p.m.•24 views

GHSA-PHWH-4F42-GWF3 Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID

Summary The hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URLs using fmt.Sprintf with the raw value instead of...

6.5CVSS8.1AI score0.00545EPSS

SaveExploits1References5

Github Security Blog•added 2026/02/27 9:01 p.m.•38 views

Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID

6.5CVSS8.1AI score0.00545EPSS

SaveExploits1References5Affected Software1

EUVD•added 2026/02/27 9:01 p.m.•28 views

EUVD-2026-9053

Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID...

6.5CVSS8.2AI score0.00545EPSS

SaveExploits1References3

NVD•added 2026/02/27 8:21 p.m.•29 views

CVE-2026-27734

Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URL...

6.5CVSS0.00545EPSS

SaveExploits1References2

Cvelist•added 2026/02/27 7:41 p.m.•47 views

CVE-2026-27734 Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

6.5CVSS0.00545EPSS

SaveExploits1References2

CVE•added 2026/02/27 7:41 p.m.•49 views

CVE-2026-27734

Beszel is a server monitoring platform. Before v0.18.2, the hub’s authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied container param to the agent without validation. The agent builds Docker Engine API URLs using fmt.Sprintf with ...

6.5CVSS8.2AI score0.00545EPSS

SaveExploits1References2Affected Software1

Mend•added 2026/02/27 7:41 p.m.•8 views

CVE-2026-27734

7.1CVSS8.2AI score0.00545EPSS

SaveExploits1References6

Vulnrichment•added 2026/02/27 7:41 p.m.•11 views

CVE-2026-27734 Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

6.5CVSS8.2AI score0.00545EPSS

SaveExploits1References2

attackerkb•added 2026/02/27 7:41 p.m.•12 views

CVE-2026-27734

6.5CVSS8.3AI score0.00545EPSS

SaveExploits1References3Affected Software1

osv_cve•added 2026/02/27 7:41 p.m.•19 views

CVE-2026-27734 Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

6.5CVSS6AI score

SaveExploits0References4

AlpineLinux•added 2026/02/27 7:41 p.m.•26 views

CVE-2026-27734

6.5CVSS8.2AI score0.00545EPSS

SaveExploits1

GithubExploit•added 2026/02/27 6:58 a.m.•199 views

Exploit for CVE-2023-24012

DDS Security Test This is a ROS 2 DDS security testing enviro...

8.2CVSS6.1AI score0.00289EPSS

SaveExploits1

vulnersOsv•added 2026/02/27 6:31 a.m.•3 views

us.fatehi:schemacrawler-distrib (16.15.1), us.fatehi:schemacrawler-docker (16.15.1) +1 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.4)

net.snowflake:snowflake-jdbc MAVEN version 3.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-distrib 16.15.1 - us.fatehi:schemacrawler-docker 16.15.1 -...

5.5CVSS5.3AI score0.00259EPSS

SaveExploits1

RedhatCVE•added 2026/02/27 4:13 a.m.•21 views

CVE-2026-27899

WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...

8.8CVSS7.7AI score0.00348EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by