Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 40
   CVE NVD 22h ago

   U.S.

   U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under '/uploads/{upload-file}'. A remote, authenticated attacker could upload a crafted PHP file that executes…

   PoC public CVSS 8.8 CVE-2026-107356 U.S. Geological Survey

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=U.S.+Geological+Survey&limit=100. RSS for this section: feed.xml.