CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

278 matches found

Vulnrichment•added 2025/12/18 9:57 p.m.•3 views

CVE-2025-13427 Authentication Bypass in Dialogflow CX Messenger

An authentication bypass vulnerability in Google Cloud Dialogflow CX Messenger allowed unauthenticated users to interact with restricted chat agents, gaining access to the agents' knowledge and the ability to trigger their intents, by manipulating initialization parameters or crafting specific AP...

6.9CVSS6.7AI score0.0034EPSS

Exploits0References1

Positive Technologies•added 2025/12/11 12:0 a.m.•6 views

PT-2025-50762

Name of the Vulnerable Software and Affected Versions APC Network Management Card 4 affected versions not specified Description The software contains a path traversal issue that allows unauthenticated attackers to access sensitive system files. Attackers can manipulate URL parameters to exploit...

8.7CVSS6.5AI score0.00812EPSS

Exploits0References5

RedhatCVE•added 2025/11/21 12:18 a.m.•7 views

CVE-2025-60796

phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting XSS vulnerabilities across various components. User-supplied input from $REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations including sequences.php, indexes.php, admin.ph...

6.1CVSS6.4AI score0.00198EPSS

Exploits0References1

CVE•added 2025/11/20 12:0 a.m.•21 views

CVE-2025-60796

CVE-2025-60796 affects phpPgAdmin 7.13.0 and earlier, with multiple reflected XSS vulnerabilities across components (e.g., sequences.php, indexes.php, admin.php, and other files). User input from $_REQUEST is echoed into HTML without proper encoding or sanitization, enabling attackers to execute ...

6.1CVSS6AI score0.00198EPSS

Exploits0References4Affected Software1