CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

15456 matches found

Positive Technologies•added 2025/10/05 12:00 a.m.•9 views

PT-2025-40826

Name of the Vulnerable Software and Affected Versions Tipray Data Leakage Prevention System version 1.0 Description A flaw exists in Tipray Data Leakage Prevention System. Specifically, manipulation of the sort argument within the findFileServerPage function, accessible through the...

7.5CVSS7.3AI score0.00462EPSS

SaveExploits1References8

Positive Technologies•added 2025/10/05 12:00 a.m.•7 views

PT-2025-40807

Name of the Vulnerable Software and Affected Versions ixmaps website2017 versions prior to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 Description A security flaw exists that allows for cross site scripting. The issue is related to the manipulation of the trid argument within an HTTP GET request...

5.3CVSS3.5AI score0.00317EPSS

SaveExploits0References9

Positive Technologies•added 2025/10/05 12:00 a.m.•13 views

PT-2025-40784

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 6.0.2 Description A heap-based buffer overflow exists in the function ODDLParser::getNextSeparator within the assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h library. This issue...

7.8CVSS5.7AI score0.00227EPSS

SaveExploits1References13

Positive Technologies•added 2025/10/05 12:00 a.m.•28 views

PT-2025-40801

Name of the Vulnerable Software and Affected Versions CRMEB versions prior to 5.7 Description A security flaw exists in CRMEB that allows for SQL injection. The issue is related to the processing of the cate id argument within the GET Parameter Handler component, specifically in the file...

8.8CVSS6.6AI score0.00306EPSS

SaveExploits0References7

NVD•added 2025/10/04 11:15 p.m.•12 views

CVE-2025-11273

A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...

6.5CVSS0.00304EPSS

SaveExploits0References4