CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

151380 matches found

osv_usn•added 2026/07/22 12:52 p.m.•23 views

USN-8584-1 gst-plugins-good1.0 vulnerabilities

It was discovered that GStreamer Good Plugins incorrectly handled certain Matroska files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2026-39043 It was...

7.6CVSS7.8AI score0.00375EPSS

SaveExploits0References4

osv_rlsa•added 2026/07/22 12:03 p.m.•16 views

RLSA-2026:41905 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

7.5CVSS7.2AI score0.00824EPSS

SaveExploits0References2

Veracode•added 2026/07/22 10:52 a.m.•31 views

Authorization Bypass

PraisonAI Platform is vulnerable to Authorization Bypass. The vulnerability is due to improper authorization of label and issue-label mutations, where attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label...

7.1CVSS5.9AI score0.00376EPSS

SaveExploits0References3Affected Software1

osv_suse•added 2026/07/22 9:00 a.m.•14 views

SUSE-SU-2026:22893-1 Security update for nghttp2

This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with Content-Length bsc1269489...

6.3CVSS6.5AI score0.00253EPSS

SaveExploits0References3

osv_suse•added 2026/07/22 8:38 a.m.•14 views

SUSE-SU-2026:22807-1 Security update for pam

This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pamuserdb module's plaintext-password comparison bsc1268290...

8.2CVSS7.7AI score0.005EPSS

SaveExploits0References3

CVE•added 2026/07/22 8:33 a.m.•102 views

CVE-2026-15787

The CVE concerns The Ultimate Addons for Elementor (WordPress) up to version 2.9.1, where a Stored XSS exists in the Navigation Menu Widget via data-toggle-icon/data-close-icon attributes. The root cause is insufficient input sanitization and output escaping; wp_kses_post is applied on save for u...

6.4CVSS6.1AI score0.00419EPSS

SaveExploits0References11

osv_opensuse•added 2026/07/22 8:23 a.m.•10 views

OPENSUSE-SU-2026:21409-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: Fix compilation with GCC 15 CONC-762: always set isnull and length in...

9.1CVSS8AI score0.01041EPSS

SaveExploits0References2

NVD•added 2026/07/22 8:16 a.m.•30 views

CVE-2026-45820

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

8.7CVSS0.00488EPSS

SaveExploits0References2