CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1097 matches found

Apache Superset <=1.3.2 - Default Login

Apache Superset through 1.3.2 contains a default login vulnerability via registered database connections for authenticated users. An attacker can obtain access to user accounts and thereby obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-44451 info:...

6.5CVSS6.6AI score0.07863EPSS

Exploits0References5

Nuclei•added yesterday•38 views

Apache Superset < 4.0.2 - SQL Injection

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...

9.8CVSS5.8AI score0.04433EPSS

Exploits2References4

Nuclei•added 6 days ago•121 views

Apache Superset - Authentication Bypass

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset...

9.8CVSS7.4AI score0.97405EPSS

Exploits20References5

Chainguard•added 2026/06/16 8:22 p.m.•6 views

GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, litellm, openstack-placement-2025.2-fips, openstack-glance-2025.2-fips, openstack-placement-2025.2, wazuh-manager-fips, kserve, openstack-horizon-2025.2-fips, openstack-glance-2026.1-fips, openstack-glance-2025.1-fips,...

5.8AI score

Exploits0

Chainguard•added 2026/06/16 8:22 p.m.•8 views

CVE-2026-48523 vulnerabilities

5.4CVSS5.8AI score0.00127EPSS

Exploits1

Chainguard•added 2026/06/16 8:22 p.m.•6 views

GHSA-FHV5-28VV-H8M8 vulnerabilities

5.8AI score

Exploits0

Chainguard•added 2026/06/16 8:22 p.m.•7 views

CVE-2026-48526 vulnerabilities

7.4CVSS5.8AI score0.00232EPSS

Exploits1

Chainguard•added 2026/06/16 8:22 p.m.•8 views

CVE-2026-48524 vulnerabilities

3.7CVSS5.8AI score0.00222EPSS

Exploits0

Chainguard•added 2026/06/16 8:22 p.m.•7 views

CVE-2026-48525 vulnerabilities

5.3CVSS5.8AI score0.00288EPSS

Exploits1

Chainguard•added 2026/06/16 8:22 p.m.•5 views

GHSA-W7VC-732C-9M39 vulnerabilities

5.8AI score

Exploits0

Chainguard•added 2026/06/16 8:22 p.m.•6 views

GHSA-XGMM-8J9V-C9WX vulnerabilities

5.8AI score

Exploits0

SUSE CVE•added 2026/05/29 1:21 a.m.•15 views

SUSE CVE-2026-34043

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service DoS vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object an object that inherits from Array.prototype but ha...

7.5CVSS5.7AI score0.00472EPSS

Exploits0References4

Chainguard•added 2026/05/06 7:17 p.m.•12 views

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: mlflow, jupyter-base-notebook, prefect-fips, airflow-core, airflow, dagster-fips, superset, pgadmin4-fips, nemo, dagster, open-webui...

8.7CVSS5.8AI score0.00361EPSS

Exploits0