CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

64 matches found

Positive Technologies•added 2026/05/26 12:0 a.m.•7 views

PT-2026-43379

A weakness has been identified in ThingsBoard up to 4.3.1.1. Affected by this vulnerability is the function getGatewayDockerComposeFile of the file /api/v1/provision of the component YAML Handler. This manipulation causes code injection. It is possible to initiate the attack remotely. The attack'...

5.1CVSS5.2AI score0.00041EPSS

Exploits0References6

Positive Technologies•added 2026/03/22 12:0 a.m.•3 views

PT-2026-26969

Name of the Vulnerable Software and Affected Versions PyTorch version 2.10.0 Description A flaw exists in PyTorch related to deserialization within the pt2 Loading Handler component. The issue is triggered by manipulation of an unknown function. This can be exploited in a local environment. The...

7.8CVSS5.9AI score0.00026EPSS

Exploits0References18

Positive Technologies•added 2026/01/19 12:0 a.m.•3 views

PT-2026-3487

Name of the Vulnerable Software and Affected Versions birkir prime versions prior to 0.4.0.beta.0 Description A flaw exists in birkir prime up to version 0.4.0.beta.0. The issue resides within an unknown function of the /graphql file within the GraphQL Directive Handler component. Successful...

6.9CVSS5.6AI score0.00303EPSS

Exploits1References7

Vulnrichment•added 2025/12/29 4:2 a.m.•3 views

CVE-2025-15171 SohuTV CacheCloud ServerController.java index cross site scripting

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/controller/ServerController.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly...

5.1CVSS3.6AI score0.00019EPSS

Exploits1References5

Vulnrichment•added 2025/06/03 4:31 p.m.•8 views

CVE-2025-5510 quequnlong shiyi-blog optimize server-side request forgery

A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...

6.5CVSS7AI score0.00309EPSS

Exploits1References5

Hive Pro Threat Advisories•added 2024/02/07 9:43 a.m.•44 views

EventLogCrasher Flaw Not Serviced by Microsoft

Summary: A recently identified vulnerability, known as EventLogCrasher, poses a significant risk to Windows platforms by allowing authenticated attackers to disrupt the Windows Event Log service. This vulnerability affects all iterations of Windows and has yet to be addressed by Microsoft, lackin...

Query Builder