CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1388840 matches found

EUVD•added 6 hours ago•3 views

EUVD-2026-41466

The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks...

5.4CVSS5.6AI score

Exploits0References4

CVE•added yesterday•8 views

CVE-2026-54477

CVE-2026-54477 affects the Gardyn IoT Hub admin panel, where the absence of standard security headers allows clickjacking and cross-site scripting. The available data show an impact with low confidentiality and integrity impact (CVSS scores: 5.1/4.0 base metrics, MEDIUM), but no explicit details ...

5.4CVSS5.6AI score

Exploits0References3

RedHat Linux•added yesterday•3 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.hum1 aarch64, x8664 trivy-0.72.0-0.1.hum1.src src Security Fixes: trivy: CVE-2026-46680 CVE-2026-47262 CVE-2026-53488...

9.4CVSS5.8AI score0.00458EPSS

Exploits1References5

Circl•added yesterday•3 views

CVE-2026-8441

creationtimestamp| type| source ---|---|--- 2026-07-02 22:23:03+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpp327ptzn2o 2026-07-02 22:23:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp32aiaer2u 2026-07-03 03:35:32+00:00| seen|...

7.5CVSS5.8AI score0.00374EPSS

Exploits0References4

CVE•added yesterday•18 views

CVE-2026-26145

Technical details (affected product/component, root cause, impact, versions, or remediation) are not publicly provided in the supplied documents. Monitor updates from official sources for concrete information.

4.8CVSS5.8AI score

Exploits0References1

RedhatCVE•added yesterday•3 views

CVE-2026-54265

A flaw was found in Angular's @angular/compiler package. When a native DOM property requiring sanitization is bound using two-way binding syntax, the template compiler fails to apply the appropriate sanitizer. An attacker who controls the bound value can bypass Angular's built-in sanitization,...

6.1CVSS5.5AI score0.00195EPSS

Exploits0References6

EUVD•added yesterday•23 views

EUVD-2026-12688

Keycloak: Unauthorized access via improper validation of encrypted SAML assertions...

7.7CVSS5.8AI score0.00241EPSS

Exploits0References11

EUVD•added yesterday•6 views

EUVD-2026-37820

Steeltoe: TLS private keys written to /tmp with default permissions, never deleted...

4.7CVSS5.8AI score0.00065EPSS

Exploits0References3