CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10626 matches found

Positive Technologies•added 2025/10/06 12:00 a.m.•26 views

PT-2025-40911

Name of the Vulnerable Software and Affected Versions Emlog versions up to and including 2.5.22 Description A cross-site scripting XSS issue exists in Emlog, potentially allowing authenticated remote attackers to inject arbitrary web script or HTML. This is possible through the file upload...

6.1CVSS5.7AI score0.00282EPSS

SaveExploits1References9

Packet Storm News•added 2025/10/05 12:00 a.m.•16 views

Real-VulLLM: An LLM Based Assessment Framework in the Wild

Artificial Intelligence AI and more specifically Large Language Models LLMs have demonstrated exceptional progress in multiple areas including software engineering, however, their capability for vulnerability detection in the wild scenario and its corresponding reasoning remains underexplored...

6.8AI score

SaveExploits0

GithubExploit•added 2025/10/04 7:11 a.m.•830 views

Exploit for Incomplete List of Disallowed Inputs in Fasterxml Jackson-Databind

🔥 Jackson RCE Exploiter - Enterprise Bypass Edition !Versi...

9.8CVSS7.7AI score0.45205EPSS

SaveExploits8

Rockylinux•added 2025/10/04 12:11 a.m.•16 views

glibc security update

An update is available for glibc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

5.6CVSS6.6AI score0.00306EPSS

SaveExploits0

Tenable Nessus•added 2025/10/04 12:00 a.m.•6 views

RockyLinux 10 : glibc (RLSA-2025:11066)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:11066 advisory. glibc: Vector register overwrite bug in glibc CVE-2025-5702 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

5.6CVSS6.7AI score0.00306EPSS

SaveExploits0References3

Cvelist•added 2025/10/03 9:46 p.m.•22 views

CVE-2025-61681 Kuno is Vulnerable to Stored XSS Attack via SVG File Upload

KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...

5.4CVSS0.00245EPSS

SaveExploits0References3