Lucene search
+L

265776 matches found

osv_root
osv_root
•added 2026/10/22 12:45 p.m.•34 views

ROOT-APP-PYPI-CVE-2026-54060 CVE-2026-54060 in pillow - Patched by Root

Root has patched CVE-2026-54060 in the pillow package for Root:PyPI. Multiple fixed versions available...

7.5CVSS7.2AI score0.00418EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/22 12:32 p.m.•22 views

CVE-2019-14287

CVE-2019-14287...

9CVSS7.8AI score0.63764EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/10/22 12:06 p.m.•16 views

CVE-2025-53024

CVE-2025-53024...

8.2CVSS7.8AI score0.00288EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/22 11:57 a.m.•22 views

CVE-2023-3450

CVE-2023-3450...

7.2CVSS6.1AI score0.5083EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/22 11:51 a.m.•25 views

CVE-2025-55182

Affected Versions Component| Recommended Version for Reproduction| Vulnerable Version Range ---|---|--- Node.js| = 20.9.0| 20.9.0 LTS and above Next.js| 15.0.0| 15.x, 16.x App Router React Core| 19.0.0 or 19.2.0| 19.0.0 to 19.2.0 RSC Bundler| react-server-dom-webpack| 19.0.0 to 19.2.0 Build and...

10CVSS8.2AI score0.99802EPSS
SaveExploits402References1
osv_root
osv_root
•added 2026/10/22 10:54 a.m.•38 views

ROOT-APP-PYPI-CVE-2026-49855 CVE-2026-49855 in tornado - Patched by Root

Root has patched CVE-2026-49855 in the tornado package for Root:PyPI. Multiple fixed versions available...

7.5CVSS7.1AI score0.00572EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/22 10:37 a.m.•16 views

Path-Traversal-CVE-2024-4956

This repository does not have a README...

7.5CVSS7.7AI score0.18245EPSS
SaveExploits17
osv_root
osv_root
•added 2026/10/22 9:47 a.m.•50 views

ROOT-APP-GOBINARY-CVE-2026-39831 CVE-2026-39831 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39831 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

9.1CVSS6.3AI score0.00487EPSS
SaveExploits0
osv_root
osv_root
•added 2026/10/22 9:47 a.m.•45 views

ROOT-APP-GOBINARY-CVE-2026-39833 CVE-2026-39833 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39833 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

9.1CVSS5.9AI score0.00487EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/22 8:36 a.m.•22 views

cve-2025-43300

This repository does not have a README...

10CVSS8.7AI score0.3203EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/10/22 5:29 a.m.•21 views

CVE-2020-3452

This repository does not have a README...

7.5CVSS7.6AI score0.99992EPSS
SaveExploits26
Kitploit
Kitploit
•added 2026/10/22 5:02 a.m.•19 views

CVE-2025-55423-analysis-and-reproduction

This repository does not have a README...

9.8CVSS5.8AI score0.03736EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/22 3:58 a.m.•16 views

CVE-2017-0213

CVE-2017-0213 for command line...

7.3CVSS6.8AI score0.84258EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/10/22 3:22 a.m.•26 views

CVE-2026-76581

CVE-2026-76581 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

9.8CVSS8.7AI score0.00435EPSS
SaveExploits2References3
Kitploit
Kitploit
•added 2026/10/22 2:07 a.m.•14 views

cve-2020-0796

This repository does not have a README...

10CVSS8.6AI score0.9981EPSS
SaveExploits127
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•65 views

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

9.8CVSS8.5AI score0.07073EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•682 views

Chamilo LMS <= 1.11.24 - Remote Code Execution

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. id: CVE-2023-422...

8.1CVSS7.5AI score0.76084EPSS
SaveExploits26References4
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•89 views

ATutor < 2.2.1 - Cross Site Scripting

ATutor 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting XSS, in ATtutor 2.2.1 via token body parameter. id: CVE-2023-27008 info: name: ATutor 2.2.1 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ATutor 2.2.1 was discovered with a vulnerability, a...

6.1CVSS6AI score0.01499EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•191 views

Viessmann Vitogate 300 - Remote Code Execution

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method. id: CVE-2023-45852 info: name: Viessmann Vitogate 300 - Remote Code Execution autho...

9.8CVSS7.6AI score0.15247EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•178 views

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

9.1CVSS8.3AI score0.60416EPSS
SaveExploits2References5
Rows per page
Query Builder