CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1580 matches found

OSSF Malicious Packages•added 2026/07/13 7:00 a.m.•43 views

Malicious code in sso-users-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc80441472ec24451f83aebdc186d5bc532ddadaac8888d3d30b72c17c94f993 [email protected] is a hollow package main exports , empty author/description, inflated 99.9.1 version whose sole effect on install is to pu...

5.7AI score

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/07/13 12:00 a.m.•10 views

CVE-2026-14934: Missing Authorization

A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and perform cross-tena...

9.4CVSS5.8AI score0.00351EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/13 12:00 a.m.•29 views

PT-2026-57802

9.4CVSS6.1AI score0.00351EPSS

SaveExploits0References2

osv_mal•added 2026/07/12 3:12 p.m.•26 views

MAL-2026-10198 Malicious code in polylabel-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7df46acd8236fafbaa27dbccb92d1f286c17b023ea5ff555700e76c4a0188f [email protected] ships an empty index.js stub and declares its only runtime dependency as a direct tarball URL on a Google Cloud Storage...

5.8AI score

SaveExploits0References2

Positive Technologies•added 2026/07/11 12:00 a.m.•44 views

PT-2026-57441

Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.0-alpha.1 Parse Server versions 8.x through 8.6.83 Description A stored cross-site scripting XSS issue exists when the software fails to recognize an uploaded file's extension via the mime package,...

2.1CVSS5.5AI score0.00415EPSS

SaveExploits0References11

Rapid7 Vulnerability Database (full)•added 2026/07/11 12:00 a.m.•6 views

CVE-2026-61448: Unrestricted Upload of File with Dangerous Type

Parse Server is affected by a stored cross-site scripting XSS vulnerability in versions = 9.0.0, 9.10.0-alpha.2 and = 8.6.83. When an uploaded file's extension is not recognized by the mime package, Parse Server preserves the client-supplied Content-Type. A malformed Content-Type that is not a...

2.1CVSS5.5AI score0.00415EPSS

SaveExploits0References2