CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

33123 matches found

SUSE CVE•added 2026/05/09 2:43 a.m.•14 views

SUSE CVE-2026-41570

PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child processes used for isolated/PHPT test execution as -d name=value command-line arguments without neutralizing INI metacharacters. Because PHP's INI parser interprets " as a string...

7.8CVSS6.5AI score0.00191EPSS

SaveExploits0References3

RedhatCVE•added 2026/05/09 2:21 a.m.•21 views

CVE-2024-33724

SOPlanning 1.52.00 is vulnerable to Cross Site Scripting XSS via the groupeid parameter to process/groupesave.php...

5.4CVSS5.8AI score0.00551EPSS

SaveExploits1References1

Chainguard•added 2026/05/09 1:18 a.m.•14 views

GHSA-3V2C-X6Q9-F697 vulnerabilities

Vulnerabilities for packages: descheduler-fips, crossplane-provider-aws-bedrockagent, policy-bot-fips, hydra-fips, longhorn-share-manager-fips, crossplane-provider-aws-osis-fips, crossplane-provider-aws-scheduler-fips, thanos, kubernetes-csi-livenessprobe, crossplane-provider-aws-lexmodels,...

5.2AI score

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•17 views

GHSA-2283-WF8C-RW8R vulnerabilities

5.2AI score

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•22 views

CVE-2026-39823 vulnerabilities

6.1CVSS6.9AI score0.00314EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•23 views

CVE-2026-39826 vulnerabilities

6.1CVSS6.9AI score0.00371EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•24 views

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: descheduler-fips, nri-f5-fips, crossplane-provider-aws-bedrockagent, policy-bot-fips, hydra-fips, nri-prometheus, tflintenv-fips, ytt-fips, fairwinds-gemini-fips, longhorn-share-manager-fips, crossplane-provider-aws-osis-fips, crossplane-provider-aws-scheduler-fips,...

5.3CVSS6.5AI score0.00179EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•22 views

CVE-2026-42501 vulnerabilities

7.5CVSS7.6AI score0.00231EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•25 views

CVE-2026-39817 vulnerabilities

5.9CVSS6.8AI score0.0017EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•21 views

GHSA-QF3Q-3H68-MMH2 vulnerabilities

5.2AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•43 views

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: descheduler-fips, nri-f5-fips, crossplane-provider-aws-bedrockagent, policy-bot-fips, hydra-fips, nri-prometheus, ytt-fips, fairwinds-gemini-fips, longhorn-share-manager-fips, crossplane-provider-aws-osis-fips, crossplane-provider-aws-scheduler-fips, sonobuoy-fips,...

7.5CVSS7.6AI score0.00588EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•19 views

GHSA-QC64-M6C2-V4X7 vulnerabilities

5.2AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•17 views

GHSA-5M4P-2GJX-P2G8 vulnerabilities

5.2AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•19 views

GHSA-8G2R-HHVJ-MV99 vulnerabilities

5.2AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•37 views

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: nri-f5-fips, nri-prometheus, ytt-fips, crossplane-provider-aws-osis-fips, sonobuoy-fips, eks-node-monitoring-agent, redpanda-operator, harbor-scanner-trivy-fips, aws-ebs-csi-driver-fips, kubernetes-csi-external-health-monitor, cortex-fips,...

7.5CVSS6.3AI score0.00781EPSS

SaveExploits0

CNNVD•added 2026/05/09 12:0 a.m.•20 views

Pillow 安全漏洞

Pillow is an open-source image processing library developed by Pillow. Versions of Pillow from 4.2.0 to 12.2.0 contained security vulnerabilities. These vulnerabilities were due to malicious PDFs, which could cause processes to hang indefinitely, consume 100% of the CPU resources, and render the...

5.5CVSS7.1AI score0.00126EPSS

SaveExploits0References1

RedhatCVE•added 2026/05/08 11:51 p.m.•20 views

CVE-2026-43433

A flaw was found in the Linux kernel's rustbinder component. If a local process gains the ability to write to its own virtual memory area VMA, it could exploit a time-of-check to time-of-use TOCTOU vulnerability. This allows the process to alter the offsets array during a transaction before it is...

7.8CVSS5.8AI score0.00099EPSS

SaveExploits0References4

Snyk•added 2026/05/08 11:7 p.m.•11 views

Deserialization of Untrusted Data

Overview langchain-core is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the load process. An attacker can instantiate trusted classes with untrusted constructor arguments by submitting specially...

8.8CVSS5.8AI score0.00406EPSS

SaveExploits0References2

Snyk•added 2026/05/08 10:47 p.m.•10 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the POST /upi/v1/upNodesLinks handler, which processes attacker-controlled JSON input without authentication or authorization checks. An attacker can terminate the entire process by submitting a crafted...

8.7CVSS5.8AI score0.00364EPSS

SaveExploits1References4

RedhatCVE•added 2026/05/08 10:42 p.m.•11 views

CVE-2026-43411

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol. A local user can trigger a divide-by-zero error by setting a specific connection timeout value. This can lead to a kernel panic, effectively causing a Denial of Service DoS on the affected system...

5.5CVSS5.8AI score0.00123EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by