CVE Vulnerability Database
Search and browse 425,079 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-51862 | CRITICAL | 9.1 | 0.3% | Sep 30, 2026 | DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_... |
| CVE-2026-51861 | CRITICAL | 9.8 | 0.2% | Sep 30, 2026 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py. |
| CVE-2026-51860 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_e... |
| CVE-2026-51859 | CRITICAL | 9.1 | 0.3% | Sep 30, 2026 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/co... |
| CVE-2026-51858 | CRITICAL | 9.8 | 0.2% | Sep 30, 2026 | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execu... |
| CVE-2026-51857 | CRITICAL | 9.8 | 0.2% | Sep 30, 2026 | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through Sub... |
| CVE-2026-51856 | CRITICAL | 9.8 | 0.2% | Sep 30, 2026 | In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool... |
| CVE-2026-51853 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__... |
| CVE-2026-51852 | HIGH | 7.5 | 0.2% | Sep 30, 2026 | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.sa... |
| CVE-2026-51570 | HIGH | 8.1 | 0.4% | Sep 30, 2026 | modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. |
| CVE-2026-51568 | HIGH | 8.1 | 0.4% | Sep 30, 2026 | modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file. |
| CVE-2026-103000 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alph... |
| CVE-2026-102999 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files c... |
| CVE-2026-102998 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause... |
| CVE-2026-102997 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed... |
| CVE-2026-102996 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 ... |
| CVE-2026-102995 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source... |
| CVE-2026-102150 | HIGH | 7.2 | 0.2% | Sep 30, 2026 | A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker c... |
| CVE-2026-102149 | CRITICAL | 9.4 | 0.2% | Sep 30, 2026 | Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This ... |
| CVE-2026-102147 | CRITICAL | 9.3 | 0.3% | Sep 30, 2026 | A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted ... |
| CVE-2026-102146 | MEDIUM | 6.5 | 0.3% | Sep 30, 2026 | An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files wi... |
| CVE-2026-102145 | MEDIUM | 6.6 | 0.3% | Sep 30, 2026 | An authenticated administrator could cause the server to issue requests to, and interact with, internal network services... |
| CVE-2026-102144 | MEDIUM | 5.3 | 0.4% | Sep 30, 2026 | A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to ... |
| CVE-2026-102143 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesyste... |
| CVE-2026-102142 | HIGH | 7.2 | 0.4% | Sep 30, 2026 | A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions c... |