CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2033 matches found

Wolfi•added 2026/06/04 1:48 p.m.•13 views

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: nri-apache, promxy, crossplane-provider-aws-route53, vitess, argocd-image-updater, spqr, external-secrets-operator, cloud-provider-azure, crossplane-provider-aws-cloudfront, crossplane-provider-aws-lambda, goreleaser, cluster-proportional-autoscaler,...

5.3AI score

Exploits0

Wolfi•added 2026/06/04 1:48 p.m.•11 views

GHSA-H3GM-Q7M7-MP28 vulnerabilities

5.3AI score

Exploits0

Wolfi•added 2026/06/04 1:48 p.m.•14 views

CVE-2026-42507 vulnerabilities

5.3CVSS5.5AI score0.0037EPSS

Exploits0

Wolfi•added 2026/06/04 1:48 p.m.•15 views

CVE-2026-27145 vulnerabilities

7.5CVSS7.3AI score0.00939EPSS

Exploits0

Chainguard•added 2026/06/04 1:20 p.m.•21 views

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: secretgen-controller, keda-http-add-on-fips, hubble-ui, haproxy-ingress, cerbos-fips, vault-fips, crossplane-provider-azure-servicefabric, karpenter, crossplane-provider-aws-ecs, net-kourier-fips, prometheus-mongodb-exporter-fips, cass-operator-fips-no-pvc-delete,...

5.3AI score

Exploits0

Chainguard•added 2026/06/04 1:20 p.m.•13 views

GHSA-H3GM-Q7M7-MP28 vulnerabilities

5.3AI score

Exploits0

Chainguard•added 2026/06/04 1:20 p.m.•14 views

CVE-2026-42507 vulnerabilities

5.3CVSS5.5AI score0.0037EPSS

Exploits0

Chainguard•added 2026/06/04 1:20 p.m.•13 views

CVE-2026-27145 vulnerabilities

7.5CVSS7.3AI score0.00939EPSS

Exploits0

OSV•added 2026/05/06 11:28 a.m.•4 views

CVE-2026-43250 usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in epnuke The ChipIdea UDC driver can encounter "not page aligned sg buffer" errors when a USB device is reconnected after being disconnected during an active transfer. This occurs becau...

7.8CVSS6.7AI score0.00129EPSS

Exploits0References7

Packet Storm News•added 2026/02/02 12:0 a.m.•6 views

Flat Nuke 3.1.2 Cross Site Scripting

A cross site scripting vulnerability exists in Flat Nuke version 3.1.2. The vulnerability allows remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...

5.2AI score

Exploits0

RedhatCVE•added 2026/01/09 11:42 a.m.•8 views

CVE-2001-1522

Cross-site scripting XSS vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message...

4.3CVSS5.9AI score0.00992EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 11:41 a.m.•9 views

CVE-2001-1523

Cross-site scripting XSS vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter...

4.3CVSS6AI score0.00998EPSS

Exploits1References1

Wolfi•added 2025/12/04 7:47 p.m.•30 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: rootlesskit, govulncheck, harbor-scanner-trivy, cilium-certgen, cluster-api-aws-controller, newrelic-infrastructure-agent, grafana-agent-operator, haproxy-ingress, kube-vip-cloud-provider, spark-operator, go-md2man, incert, harbor-registry, scorecard, gostatsd,...

7.5CVSS7.4AI score0.00459EPSS

Exploits2