CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2026/09/29 12:00 a.m.•15 views

CVE-2026-79403: Improper Handling of Insufficient Permissions or Privileges

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint...

8.4CVSS6.8AI score0.00125EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/08/17 12:00 a.m.•10 views

CVE-2026-75053: Server-Side Request Forgery (SSRF)

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...

5.4CVSS5.8AI score0.0024EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/08/13 12:00 a.m.•9 views

CVE-2026-42931: Allocation of Resources Without Limits or Throttling

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...

6.5CVSS6.2AI score0.0053EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2025/07/28 12:00 a.m.•6 views

CVE-2025-54536: Cross-Site Request Forgery (CSRF)

In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint...

8.8CVSS5.7AI score0.00174EPSS

SaveExploits0References1

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by