CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

52551 matches found

Debian CVE•added 2026/05/12 1:28 p.m.•26 views

CVE-2026-40016

Attacker can upload a malicious Sieve script over ManageSieve service or locally to bypass configured CPU time limits for Sieve up to 130 times of the configured limit. Attacker can use this to degrade server performance and bypass configured CPU time limits for Sieve scripts. Install fixed...

6.5CVSS5.7AI score0.00338EPSS

SaveExploits0

Debian CVE•added 2026/05/12 1:28 p.m.•18 views

CVE-2026-33603

Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the client connection. If successful, the attacker can eavesdrop communications between Dovecot and...

6.8CVSS5.8AI score0.00214EPSS

SaveExploits0

Debian CVE•added 2026/05/12 12:36 p.m.•20 views

CVE-2026-8389

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3...

8.8CVSS5.8AI score0.00331EPSS

SaveExploits0

OSV•added 2026/05/12 10:20 a.m.•6 views

OPENSUSE-SU-2026:20717-1 Security update for raylib

This update for raylib fixes the following issues: Changes in raylib: - security update: CVE-2025-15533: Fix heap-based buffer overflow via GenImageFontAtlas function manipulation bsc1256900 CVE-2025-15534: Fix integer overflow vulnerability in LoadFontData bsc1256901 - Update to 5.5: NEW raylib...

7.8CVSS6AI score0.00341EPSS

SaveExploits2References4

Malwarebytes•added 2026/05/12 8:41 a.m.•21 views

Stolen Canvas data was “returned” after hacker agreement, Instructure says

The Instructure/Canvas data breach that has dominated cybersecurity coverage recently has reached a new stage. Millions of students had personal data stolen, with extortion group ShinyHunters claiming credit for the data breach and applying extra pressure for their ransom demands by bothering...

5.8AI score

SaveExploits0

RedhatCVE•added 2026/05/12 8:20 a.m.•19 views

CVE-2026-42571

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

9CVSS5.7AI score0.0032EPSS

SaveExploits0References1