CVE search

364,804 results
CVE-2026-56262MEDIUMCrawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API ServerEPSS 0.4%CVE-2026-56257HIGHCapgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST UpdateEPSS 0.2%CVE-2026-56256HIGHCapgo - Two-Factor Authentication Bypass via Organization Management APIEPSS 0.2%CVE-2026-56245HIGHSupabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPCEPSS 0.3%CVE-2026-56244HIGHCapgo - Webhook Signing Secret Disclosure via Non-Admin API KeyEPSS 0.2%CVE-2026-56237CRITICALCapgo - Unauthenticated API Key Generation via Client-Side Parameter ManipulationEPSS 0.3%CVE-2026-56232HIGHCapgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id HeaderEPSS 0.3%CVE-2026-56231HIGHCapgo - Broken Object Level Authorization in Build Job Control via jobId ParameterEPSS 0.2%CVE-2026-56223CRITICALCapgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-userEPSS 0.2%CVE-2025-71361HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tipEPSS 0.3%CVE-2025-71354HIGHpicklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetTextEPSS 0.3%CVE-2025-71332HIGHFlowise - SQL Injection in importChatflows API via chatflow.id ParameterEPSS 0.3%CVE-2026-13140LOWStored Cross-Site Scripting in Canarytokens.orgEPSS 0.2%CVE-2026-13150MEDIUMSSRF in Pentestify PDF generation endpoint via Host headerEPSS 0.3%CVE-2026-52944—ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSEEPSS 0.1%CVE-2026-11968MEDIUMImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGitEPSS 0.1%CVE-2026-52943HIGHnet: skbuff: fix missing zerocopy reference in pskb_carve helpersEPSS 0.2%CVE-2026-10745HIGHImproper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows allows Log InjectioEPSS 0.3%CVE-2026-56052HIGHWordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-52942HIGHnetfilter: nf_log: validate MAC header was set before dumping itEPSS 0.1%