CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6503 matches found

Positive Technologies•added 2025/10/06 12:00 a.m.•10 views

PT-2025-40908

Name of the Vulnerable Software and Affected Versions Flowise version 3.0.7 Description Flowise, a drag & drop user interface for building customized large language model flows, contains a file upload issue. Authenticated users can upload arbitrary files without proper validation, enabling...

8.3CVSS7AI score0.11058EPSS

SaveExploits2References15

EUVD•added 2025/10/05 6:30 a.m.•22 views

EUVD-2025-32443

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.8CVSS6.6AI score0.99732EPSS

SaveExploits16References2

Patchstack•added 2025/10/03 11:50 p.m.•11 views

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() vulnerability

Authentication Bypass via getresourceownerfromidtoken vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 6.26.12...

9.8CVSS6.7AI score0.00599EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2025/10/03 11:39 p.m.•29 views

WordPress Appy Pie Connect for WooCommerce plugin <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password vulnerability

Missing Authorization to Unauthenticated Privilege Escalation via resetuserpassword vulnerability discovered by johska in WordPress Plugin Appy Pie Connect for WooCommerce versions = 1.1.2...

9.8CVSS6.7AI score0.00467EPSS

SaveExploits1References1Affected Software1

EUVD•added 2025/10/03 8:07 p.m.•12 views

EUVD-2021-33480