Search

Expected end of text, found '.' (at char 15), (line:1, col:16)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (331337 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-23846 1 Quenary 1 Tugtainer 2026-02-05 8.1 High
Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwords via URL query parameters instead of the HTTP request body. This causes passwords to be logged in server access logs and potentially exposed through browser history, Referer headers, and proxy logs. Version 1.16.1 patches the issue.
CVE-2024-10930 1 Carrier 1 Block Load 2026-02-05 7.8 High
An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges.
CVE-2026-23878 1 Hotcrp 1 Hotcrp 2026-02-05 6.5 Medium
HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents (PDFs, attachments) associated with any submission. The problem was patched in commit ceacd5f1476458792c44c6a993670f02c984b4a0.
CVE-2026-23845 1 Axllent 1 Mailpit 2026-02-05 5.8 Medium
Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery (SSRF) via HTML Check CSS Download. The HTML Check feature (`/api/v1/message/{ID}/html-check`) is designed to analyze HTML emails for compatibility. During this process, the `inlineRemoteCSS()` function automatically downloads CSS files from external `<link rel="stylesheet" href="...">` tags to inline them for testing. Version 1.28.3 fixes the issue.
CVE-2025-15311 1 Tanium 1 Tanos 2026-02-05 7.8 High
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
CVE-2025-15312 1 Tanium 1 Tanos 2026-02-05 6.6 Medium
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
CVE-2025-15324 1 Tanium 1 Service Engage 2026-02-05 6.6 Medium
Tanium addressed a documentation issue in Engage.
CVE-2025-15325 1 Tanium 1 Service Discover 2026-02-05 6.3 Medium
Tanium addressed an improper input validation vulnerability in Discover.
CVE-2025-15326 1 Tanium 1 Service Patch 2026-02-05 4.3 Medium
Tanium addressed an improper access controls vulnerability in Patch.
CVE-2025-15327 1 Tanium 1 Service Deploy 2026-02-05 4.3 Medium
Tanium addressed an improper access controls vulnerability in Deploy.
CVE-2025-15328 1 Tanium 1 Service Enforce 2026-02-05 5 Medium
Tanium addressed an improper link resolution before file access vulnerability in Enforce.
CVE-2025-15330 1 Tanium 1 Service Deploy 2026-02-05 8.8 High
Tanium addressed an improper input validation vulnerability in Deploy.
CVE-2026-25543 1 Mganss 1 Htmlsanitizer 2026-02-05 N/A
HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. Prior to versions 9.0.892 and 9.1.893-beta, if the template tag is allowed, its contents are not sanitized. The template tag is a special tag that does not usually render its contents, unless the shadowrootmode attribute is set to open or closed. This issue has been patched in versions 9.0.892 and 9.1.893-beta.
CVE-2025-15331 1 Tanium 1 Service Connect 2026-02-05 4.3 Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Connect.
CVE-2025-15329 1 Tanium 1 Service Threatresponse 2026-02-05 4.9 Medium
Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15332 1 Tanium 1 Service Threatresponse 2026-02-05 4.9 Medium
Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15321 1 Tanium 1 Tanos 2026-02-05 2.7 Low
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
CVE-2025-15333 1 Tanium 1 Service Threatresponse 2026-02-05 4.3 Medium
Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15334 1 Tanium 1 Service Threatresponse 2026-02-05 4.3 Medium
Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15335 1 Tanium 1 Service Threatresponse 2026-02-05 4.3 Medium
Tanium addressed an information disclosure vulnerability in Threat Response.