CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-60111 | — | — | — | Oct 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-51912 | CRITICAL | 9.8 | 0.2% | Oct 29, 2026 | OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witn... |
| CVE-2026-51905 | HIGH | 8.8 | 0.3% | Oct 29, 2026 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in su... |
| CVE-2026-51903 | HIGH | 8.1 | 0.3% | Oct 29, 2026 | SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controll... |
| CVE-2026-51902 | MEDIUM | 6.5 | 0.1% | Oct 29, 2026 | SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/... |
| CVE-2026-51863 | CRITICAL | 9.1 | 0.4% | Oct 29, 2026 | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v... |
| CVE-2026-51851 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:Fil... |
| CVE-2026-118769 | CRITICAL | 9.2 | 0.4% | Oct 29, 2026 | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size con... |
| CVE-2026-118768 | MEDIUM | 5.9 | 0.1% | Oct 29, 2026 | Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response ... |
| CVE-2026-118767 | MEDIUM | 4.8 | 0.2% | Oct 29, 2026 | Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containi... |
| CVE-2026-118766 | MEDIUM | 6.1 | 0.1% | Oct 29, 2026 | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while po... |
| CVE-2026-116566 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be... |
| CVE-2026-107347 | HIGH | 8.4 | 0.1% | Oct 29, 2026 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes... |
| CVE-2026-102260 | MEDIUM | 4.3 | 0.2% | Oct 29, 2026 | HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API e... |
| CVE-2026-62374 | HIGH | 7.1 | 0.2% | Oct 29, 2026 | SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and e... |
| CVE-2026-11587 | HIGH | 7.2 | 0.3% | Oct 29, 2026 | SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database |
| CVE-2026-119115 | HIGH | 8.5 | 0.2% | Oct 29, 2026 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer)... |
| CVE-2026-118765 | HIGH | 7.3 | 0.1% | Oct 29, 2026 | Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then... |
| CVE-2026-118764 | MEDIUM | 6.9 | 0.3% | Oct 29, 2026 | minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.... |
| CVE-2026-118763 | HIGH | 7.4 | 0.3% | Oct 29, 2026 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/regis... |
| CVE-2026-118762 | CRITICAL | 9.3 | 0.3% | Oct 29, 2026 | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml wo... |
| CVE-2026-118761 | HIGH | 7.5 | 0.5% | Oct 29, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the... |
| CVE-2026-118760 | MEDIUM | 6.5 | 0.4% | Oct 29, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1... |
| CVE-2026-118759 | HIGH | 7.5 | 0.3% | Oct 29, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the... |
| CVE-2026-118758 | HIGH | 7.5 | 0.5% | Oct 29, 2026 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the... |