CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55457 | HIGH | 7.4 | 0.3% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version ... |
| CVE-2026-55444 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version ... |
| CVE-2026-55442 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 23.0... |
| CVE-2026-55222 | MEDIUM | 5.1 | — | Oct 23, 2026 | Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg... |
| CVE-2026-54668 | HIGH | 8.7 | 0.3% | Oct 23, 2026 | Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library Suite. P... |
| CVE-2026-53942 | CRITICAL | 9.9 | — | Oct 23, 2026 | Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub ... |
| CVE-2026-49442 | MEDIUM | 5.3 | 0.2% | Oct 23, 2026 | Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerab... |
| CVE-2026-46652 | CRITICAL | 9.8 | 0.7% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0... |
| CVE-2026-46651 | CRITICAL | 9.8 | 0.4% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0... |
| CVE-2026-46531 | MEDIUM | 5.5 | 0.2% | Oct 23, 2026 | Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti ... |
| CVE-2026-46347 | MEDIUM | 6.8 | 0.3% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version ... |
| CVE-2026-46346 | MEDIUM | 6.5 | — | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version ... |
| CVE-2026-39902 | HIGH | 7.2 | 0.4% | Oct 23, 2026 | Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `... |
| CVE-2026-115478 | HIGH | 7.1 | 0.3% | Oct 23, 2026 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `crea... |
| CVE-2026-115477 | HIGH | 7.1 | 0.4% | Oct 23, 2026 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a... |
| CVE-2026-112333 | MEDIUM | 5.4 | 0.1% | Oct 23, 2026 | GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report conf... |
| CVE-2026-106765 | HIGH | 7.5 | 0.5% | Oct 23, 2026 | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList fun... |
| CVE-2026-106764 | HIGH | 7.5 | 0.5% | Oct 23, 2026 | An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch func... |
| CVE-2026-106763 | HIGH | 7.5 | 0.5% | Oct 23, 2026 | An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShel... |
| CVE-2026-102786 | HIGH | 8.6 | 0.3% | Oct 23, 2026 | Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Galler... |
| CVE-2026-93640 | HIGH | 7.8 | — | Oct 23, 2026 | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows t... |
| CVE-2026-93639 | HIGH | 8.7 | 0.4% | Oct 23, 2026 | A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no expli... |
| CVE-2026-93638 | MEDIUM | 6.1 | 0.2% | Oct 23, 2026 | A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthent... |
| CVE-2026-93636 | MEDIUM | 4.3 | 0.2% | Oct 23, 2026 | An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwi... |
| CVE-2026-93634 | MEDIUM | 4.3 | 0.2% | Oct 23, 2026 | A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert f... |