CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

OSV•added 2026/07/01 4:16 p.m.•4 views

UBUNTU-CVE-2026-58028

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php,...

5.4CVSS6.1AI score0.00267EPSS

Exploits0References7

Debian CVE•added 2026/07/01 3:15 p.m.•9 views

CVE-2026-58028

5.4CVSS5.8AI score0.00267EPSS

Exploits0

Vulnrichment•added 2026/04/22 4:8 p.m.•5 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00123EPSS

Exploits1References1

Cvelist•added 2026/04/22 4:8 p.m.•40 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

3.3CVSS0.00123EPSS

Exploits1References1

CVE•added 2026/04/22 4:8 p.m.•22 views

CVE-2026-35371

CVE-2026-35371 concerns the id utility in the uutils coreutils package. The vulnerability arises in the pretty print mode, where the tool incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This causes the output to misreport the i...

3.3CVSS5.8AI score0.00123EPSS

Exploits1References1Affected Software1