CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

vulnersOsv•added 2026/05/12 4:35 a.m.•5 views

@uipath/common (=0.1.8), @uipath/project-packager (=1.1.10) +1 more potentially affected by unknown CVE via @uipath/telemetry (>=0.0.5 <=0.0.6)

@uipath/telemetry NPM version =0.0.5, =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on @uipath/telemetry and may be impacted: - @uipath/common =0.1.8 - @uipath/project-packager =1.1.10 - @uipath/solution-packager =0.0.30 Source cves: unknown CVE...

5.8AI score

Exploits0

IBM Security Bulletins•added 2026/04/08 1:7 a.m.•4 views

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access OIDC Provider

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider Vulnerability Details CVEID:CVE-2026-24051 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking...

7CVSS7.2AI score0.00014EPSS

Exploits0Affected Software1

OSV•added 2026/04/02 4:48 p.m.•6 views

MGASA-2026-0081 Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the XML component. CVE-2025-59375 Spoofing issue in Thunderbird. CVE-2026-3889 Race condition, use-after-free in the Graphics: WebRender component. CVE-2026-4684 Incorrect boundary conditions in the Graphics: Canvas2D component. CVE-2026-4685 Incorrect boundary conditions in...

10CVSS6.5AI score0.00102EPSS

Exploits1References4

Positive Technologies•added 2026/03/13 12:0 a.m.•3 views

PT-2026-25388

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized dev name len, causing a stack overflow in the driver and crashing the task o...

6.8CVSS5.9AI score0.00034EPSS

Exploits1References6

OSV•added 2025/10/21 8:25 p.m.•2 views

GHSA-QQJ3-G7MX-5P4W NeuVector telemetry sender is vulnerable to MITM and DoS

Impact This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server at https://upgrades.neuvector-upgrade-responder.livestock.rancher.io. In affected...

8.6CVSS6.6AI score0.00075EPSS

Exploits0References6