CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107829 | MEDIUM | 5.9 | 0.2% | Oct 8, 2026 | Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digest... |
| CVE-2026-107828 | MEDIUM | 6.5 | 0.3% | Oct 8, 2026 | Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Wei... |
| CVE-2026-107801 | MEDIUM | 5.4 | 0.2% | Oct 8, 2026 | Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute... |
| CVE-2026-107800 | MEDIUM | 5.4 | 0.3% | Oct 8, 2026 | Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject ... |
| CVE-2026-107799 | MEDIUM | 5.4 | 0.2% | Oct 8, 2026 | Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject ... |
| CVE-2026-107798 | MEDIUM | 5.4 | 0.2% | Oct 8, 2026 | jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the defaul... |
| CVE-2026-107797 | MEDIUM | 6.1 | 0.2% | Oct 8, 2026 | Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that ... |
| CVE-2026-107796 | MEDIUM | 6.1 | 0.3% | Oct 8, 2026 | Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in applica... |
| CVE-2026-107793 | MEDIUM | 4.3 | 0.3% | Oct 8, 2026 | Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that al... |
| CVE-2026-107792 | MEDIUM | 4.3 | 0.2% | Oct 8, 2026 | Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToFo... |
| CVE-2026-107726 | CRITICAL | 9.3 | 0.4% | Oct 8, 2026 | Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.1... |
| CVE-2026-107725 | HIGH | 8.7 | 0.4% | Oct 8, 2026 | Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.1... |
| CVE-2026-107724 | HIGH | 7.4 | 0.2% | Oct 8, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw serialized public JWK or... |
| CVE-2026-107723 | HIGH | 8.1 | 0.4% | Oct 8, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts a validly si... |
| CVE-2026-107722 | CRITICAL | 9.8 | 0.3% | Oct 8, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-... |
| CVE-2026-107721 | MEDIUM | 5.9 | 0.3% | Oct 8, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts Infinity for... |
| CVE-2026-107720 | HIGH | 7.4 | 0.3% | Oct 8, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned ... |
| CVE-2026-107719 | MEDIUM | 4.2 | 0.2% | Oct 8, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.4, the fast-jwt createVerifier cache can contin... |
| CVE-2026-107718 | MEDIUM | 6.1 | 0.3% | Oct 8, 2026 | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, Adonis... |
| CVE-2026-107717 | MEDIUM | 6.5 | 0.3% | Oct 8, 2026 | Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chat_messages() at... |
| CVE-2026-107716 | HIGH | 7.3 | 0.1% | Oct 8, 2026 | Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry d... |
| CVE-2026-107715 | MEDIUM | 6.8 | 0.4% | Oct 8, 2026 | The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize sends caller-supplied... |
| CVE-2026-107714 | MEDIUM | 5.9 | 0.2% | Oct 8, 2026 | The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agent#response... |
| CVE-2026-107406 | CRITICAL | 9.5 | 0.4% | Oct 8, 2026 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. Ne... |
| CVE-2026-107399 | MEDIUM | 6.8 | 0.4% | Oct 8, 2026 | The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize applies no origin tru... |