CVE & Exploit Intelligence Database

Updated 1h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,223 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,429 researchers

5 results Clear all

CVE-2026-28370 9.1 CRITICAL 1 PoC 1 Writeup Analysis EPSS 0.00

OpenStack Vitrage <12.0.1,13.0.0,14.0.0,15.0.0 - Code Injection

In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitrage service runs under. This may result in unauthorized access to the host and further compromise of the Vitrage service. All deployments exposing the Vitrage API are affected. This occurs in _create_query_function in vitrage/graph/query.py.

CWE-95 Feb 27, 2026

CVE-2017-1000366 7.8 HIGH 3 PoCs Analysis EPSS 0.08

glibc <2.25 - RCE

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

CWE-119 Jun 19, 2017

CVE-2015-3221 1 PoC Analysis EPSS 0.13

OpenStack Neutron <2014.2.4 - DoS

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

CWE-20 Aug 26, 2015

CVE-2013-2006 1 PoC Analysis EPSS 0.00

Openstack Keystone < 8.0.0a0 - Information Disclosure

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

CWE-200 May 21, 2013

CVE-2013-0212 1 PoC Analysis EPSS 0.01

Openstack Image Registry And Delivery... - Information Disclosure

store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.

CWE-200 Feb 24, 2013