CVE search

372,393 results
CVE-2026-12195HIGHmyVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part ofEPSS 0.4%CVE-2026-14625MEDIUMNousResearch hermes-agent server.py shell.exec protection mechanismEPSS 0.2%CVE-2026-14624MEDIUMomec-project amf NGSetupRequest handler.go denial of serviceEPSS 0.3%CVE-2026-14623MEDIUMomec-project amf NGAP Message RRCInactiveTransitionReport denial of serviceEPSS 0.3%CVE-2026-14622MEDIUMjairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authenticationEPSS 0.4%CVE-2026-14621LOWFederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStreamObserver.initEggroll wrong sessionEPSS 0.2%CVE-2026-12194LOWPHPIPAM Authenticated LFIEPSS 0.3%CVE-2026-14619MEDIUMitsourcecode Hospital Management System medicine.php sql injectionEPSS 0.2%CVE-2026-14618MEDIUMOpen5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of serviceEPSS 0.3%CVE-2025-71380HIGHn8n - Arbitrary Command Execution via Execute Command NodeEPSS 0.4%CVE-2025-71375HIGHpicklescan - Undetected Remote Code Execution via _operator.methodcallerEPSS 0.4%CVE-2025-71373HIGHpicklescan - Remote Code Execution via operator.methodcaller Detection BypassEPSS 0.4%CVE-2025-71372HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef GadgetEPSS 0.4%CVE-2025-71369HIGHpicklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlersEPSS 0.4%CVE-2025-71367HIGHpicklescan - Remote Code Execution via _operator.attrgetter Detection BypassEPSS 0.4%CVE-2025-71366HIGHpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofileEPSS 0.4%CVE-2025-71364HIGHpicklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._startEPSS 0.6%CVE-2025-71362HIGHpicklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortranEPSS 0.3%CVE-2025-71360HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.get_entityEPSS 0.3%CVE-2025-71359HIGHpicklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loadsEPSS 0.4%