medium5.1
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
327 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high7.5
CVE-2026-119620
37954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted upload
37954679 · cak-filemanagement-system
high8.7
CVE-2025-8574
Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion
tigroumeow · Database Cleaner: Cleanup, Optimization & Repair
high8.5
CVE-2026-61708
SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
socfortress · CoPilot
high8.5
CVE-2026-75882
Improper access control vulnerability in ESET Encryption products for Windows
ESET spol. s.r.o. · ESET Endpoint Encryption / ESET spol. s.r.o. · ESET Full Disk Encryption
high8.8
CVE-2026-59387
Broken access control restriction in Cloud Controller API
Cloud Foundry · CAPI (Cloud Controller API) / Cloud Foundry · cf-deployment
medium6.5
critical9.4
CVE-2026-103093
Sandbox Escape via Table Rotation in ServiceNow AI Platform
ServiceNow · ServiceNow AI Platform
medium5.3
medium6.7
CVE-2026-119251
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to…
Ubiquiti Inc · WiFiman Desktop for macOS
high8.1
CVE-2026-90867
Improper Access Control of Web Admin Console in Progress WS_FTP Server
Progress Software · WS_FTP Server
high8.5
low3.8
CVE-2026-85007
YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax
Unknown · Video Player for YouTube
high8.8
high7.5
critical9.1
critical9.1
critical9.1
critical9.1
medium5.3
CVE-2026-118578
maotoumao MusicFreeDesktop Request Forwarder information disclosure
maotoumao · MusicFreeDesktop
medium6.9
medium4.4
CVE-2026-106484
Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via…
Google · chrome-devtools-mcp
high8.6
CVE-2026-67073
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
medium5.3
medium5.3
CVE-2026-106003
Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion
Unknown · Court Reservation
medium5.3
CVE-2026-103382
Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation
Unknown · Casso Flow
medium5.4
medium4.3
high7.5
CVE-2026-117512
oretnom23 php-travel-agency-system employee_insert.php unrestricted upload
oretnom23 · php-travel-agency-system
medium4.3