CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9841 matches found

EUVD•added 2025/10/07 12:30 a.m.•7 views

EUVD-2019-4052

Malware in sbrugna...

9.8CVSS9.2AI score0.0121EPSS

SaveExploits0References3

Cvelist•added 2025/10/06 9:54 p.m.•21 views

CVE-2025-61768 Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...

5.1CVSS0.00313EPSS

SaveExploits0References3

CVE•added 2025/10/06 9:54 p.m.•17 views

CVE-2025-61768

KUNO CMS prior to 1.3.15 is affected by an SSRF in the Media module via uploading specially crafted SVGs with external image references. A logged‑in administrator can trigger an outgoing connection to an arbitrary URL, enabling information disclosure or internal network probing. The issue is fixe...

5.1CVSS6.2AI score0.00313EPSS

SaveExploits0References3

Positive Technologies•added 2025/10/06 12:00 a.m.•16 views

PT-2025-40951

Name of the Vulnerable Software and Affected Versions KUNO CMS versions prior to 1.3.15 Description KUNO CMS is a full-stack blog application. A Server-Side Request Forgery SSRF issue exists in the Media module of the administrative panel. An administrator can upload a specially crafted SVG file...

5.1CVSS6.2AI score0.00313EPSS

SaveExploits0References8

OSV•added 2025/10/03 8:39 p.m.•9 views

CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...

6.9CVSS6AI score

SaveExploits0References4

CVE•added 2025/10/03 8:39 p.m.•28 views

CVE-2025-10695

Two unauthenticated diagnostic endpoints in OpenSupports 4.11.0 allow arbitrary backend-initiated connections to an attacker-controlled destination, enabling unauthenticated SSRF for internal network scanning and service interaction. Affected product/version: OpenSupports 4.11.0. Root cause: endp...

6.9CVSS6.8AI score0.00281EPSS

SaveExploits1References2Affected Software1

EUVD•added 2025/10/03 8:07 p.m.•10 views

EUVD-2023-55175