CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

115281 matches found

EUVD•added 2026/07/23 8:34 a.m.•22 views

EUVD-2026-47922

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

6.5CVSS5.8AI score0.00472EPSS

SaveExploits0References8

Cvelist•added 2026/07/23 8:34 a.m.•41 views

CVE-2026-15404 Bulk Page Generator <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title

The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpageryaddfiltertexttemplatepost function, which is hooked to adminfooter and echoes the...

6.4CVSS0.00331EPSS

SaveExploits0References5

RedHat Linux•added 2026/07/23 8:04 a.m.•41 views

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

7.5CVSS7.1AI score0.00256EPSS

SaveExploits0References4

CVE•added 2026/07/23 6:52 a.m.•22 views

CVE-2026-9729

The CVE-2026-9729 entry concerns the Webpushr Push Notifications plugin for WordPress (versions up to 4.39.0). It describes a Stored Cross-Site Scripting flaw in which unsanitized input from the webpushr_notification_title and webpushr_notification_body parameters is combined into HTML attribute ...

6.4CVSS5.5AI score0.00331EPSS

SaveExploits0References5

RedHat Linux•added 2026/07/23 3:49 a.m.•21 views

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

7.5CVSS7.1AI score0.00256EPSS

SaveExploits0References4

Cvelist•added 2026/07/23 3:01 a.m.•54 views

CVE-2026-15074 @fastify/static vulnerable to route guard bypass via path traversal

@fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in request pathnames before the file-resolution stage. This is a bypass of the earlier fix for CVE-2026-6414, which only covered encoded forward slashes. Because the underlying send library normalizes dot...

7.5CVSS0.00672EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/23 12:00 a.m.•26 views

PT-2026-64166

Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to...

5.3AI score0.0015EPSS

SaveExploits0References3

Positive Technologies•added 2026/07/23 12:00 a.m.•36 views

PT-2026-64192

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description A use-after-free issue exists in WebMCP, which occurs when an application continues to use a pointer after it has been freed, potentially leading to memory corruption. This flaw allows...

8.8CVSS6.3AI score0.00387EPSS

SaveExploits0References17

vulnersOsv•added 2026/07/22 11:09 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00872EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00872EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00336EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:08 p.m.•11 views

NPM: Next.js: Cache confusion of response bodies for requests with bodies

NPM: Next.js: Cache confusion of response bodies for requests with bodies vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6CVSS5.3AI score0.00336EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:08 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00336EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00351EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00531EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00531EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00837EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00837EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00675EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•10 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...

6.3CVSS5.8AI score0.00675EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by