CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-93633 | MEDIUM | 5.4 | 0.2% | Oct 23, 2026 | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access ... |
| CVE-2026-93631 | HIGH | 7.1 | 0.1% | Oct 23, 2026 | A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition al... |
| CVE-2026-93630 | MEDIUM | 4.3 | 0.3% | Oct 23, 2026 | A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an una... |
| CVE-2026-93629 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to ... |
| CVE-2026-93628 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an ... |
| CVE-2026-93627 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an... |
| CVE-2026-57208 | MEDIUM | 6.2 | — | Oct 23, 2026 | Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability... |
| CVE-2026-57207 | MEDIUM | 5.9 | 0.3% | Oct 23, 2026 | NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running w... |
| CVE-2026-55826 | HIGH | 8.7 | 0.3% | Oct 23, 2026 | The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to befo... |
| CVE-2026-55606 | MEDIUM | 6.5 | 0.4% | Oct 23, 2026 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHC... |
| CVE-2026-53921 | CRITICAL | 9.8 | 1.1% | Oct 23, 2026 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I... |
| CVE-2026-53920 | HIGH | 8.7 | — | Oct 23, 2026 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25... |
| CVE-2026-53918 | HIGH | 8.8 | 0.5% | Oct 23, 2026 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I... |
| CVE-2026-50057 | HIGH | 7.8 | 0.3% | Oct 23, 2026 | A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra ac... |
| CVE-2026-50056 | HIGH | 7.8 | 0.3% | Oct 23, 2026 | A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the ... |
| CVE-2026-50053 | MEDIUM | 5.4 | 0.3% | Oct 23, 2026 | A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* t... |
| CVE-2026-115786 | MEDIUM | 6.5 | 0.4% | Oct 23, 2026 | A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume ano... |
| CVE-2026-115785 | MEDIUM | 4.3 | 0.7% | Oct 23, 2026 | An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) all... |
| CVE-2026-115754 | MEDIUM | 4.7 | — | Oct 23, 2026 | serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to brea... |
| CVE-2026-115481 | HIGH | 8.5 | — | Oct 23, 2026 | baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2, `Per... |
| CVE-2026-115480 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /bas... |
| CVE-2026-115479 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated v... |
| CVE-2026-115457 | HIGH | 7.1 | 0.3% | Oct 23, 2026 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode exp... |
| CVE-2026-114624 | HIGH | 7.2 | 0.6% | Oct 23, 2026 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area enti... |
| CVE-2026-114623 | MEDIUM | 6.5 | — | Oct 23, 2026 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated use... |