CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

23746 matches found

attackerkb•added 2026/06/26 8:36 p.m.•25 views

CVE-2026-50136

Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentials stored in a workspace datasource. The route is protected only by the recaptcha middleware and does not require...

7.4CVSS5.9AI score0.0029EPSS

SaveExploits1References2Affected Software1

Chainguard•added 2026/06/26 8:23 p.m.•34 views

GHSA-VWM4-62GF-X745 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

5.8AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•28 views

CVE-2026-54898 vulnerabilities

2.1CVSS5.9AI score0.00146EPSS

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•24 views

CVE-2026-54899 vulnerabilities

6.3CVSS5.9AI score0.00333EPSS

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•25 views

CVE-2026-54903 vulnerabilities

6.3CVSS5.9AI score0.00333EPSS

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•37 views

GHSA-475M-PH3X-64GP vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•32 views

GHSA-9CV6-QCJW-4GRX vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•32 views

GHSA-9PPP-W3G4-FH4Q vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•20 views

GHSA-3M6Q-JJ5J-38C9 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•35 views

GHSA-3V45-F3VH-WG7M vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/26 8:23 p.m.•27 views

GHSA-FM7P-MPRW-WJM9 vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•30 views

CVE-2026-54901 vulnerabilities

Vulnerabilities for packages: ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...

6.3CVSS5.9AI score0.00333EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•27 views

GHSA-FM7P-MPRW-WJM9 vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•31 views

CVE-2026-54500 vulnerabilities

5.3CVSS5.9AI score0.00198EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•31 views

CVE-2026-54896 vulnerabilities

2.1CVSS5.9AI score0.00148EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•27 views

CVE-2026-54897 vulnerabilities

2.1CVSS5.9AI score0.00146EPSS

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•36 views

GHSA-2CW7-V8FF-P88R vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/06/26 8:22 p.m.•47 views

GHSA-VWM4-62GF-X745 vulnerabilities

5.8AI score

SaveExploits0

CVE•added 2026/06/26 6:59 p.m.•75 views

CVE-2026-52782

OpenProject versions prior to 17.3.3 and 17.4.1 are affected by an IDOR in /projects//settings/project_storages/ via PATCH parameter storages_project_storage[project_folder_id], allowing a project-admin to hijack another project’s managed Nextcloud/OneDrive folder on the same storage. The vulnera...

9.9CVSS5.9AI score0.00454EPSS

SaveExploits1References1

CVE•added 2026/06/26 6:56 p.m.•52 views

CVE-2026-52784

CVE-2026-52784 (OpenProject) is a CSRF vulnerability in OpenProject’s web UI. The issue allows CSRF on a user-targeted action via POST to /users/:id with the parameter user[admin], enabling unauthorized state changes without user interaction. Affected software versions are prior to 17.3.3 and 17....

8.8CVSS5.9AI score0.00241EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by