CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107334 | MEDIUM | 5.4 | — | Oct 8, 2026 | Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restri... |
| CVE-2026-107333 | HIGH | 8.1 | — | Oct 8, 2026 | Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based acc... |
| CVE-2026-107332 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local ... |
| CVE-2026-107303 | HIGH | 7.6 | — | Oct 8, 2026 | JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice arc... |
| CVE-2026-107302 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte len... |
| CVE-2026-88647 | MEDIUM | 6.5 | 0.2% | Oct 8, 2026 | GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name when Subject Alternative Name ha... |
| CVE-2026-62167 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-62166 | — | — | — | Oct 8, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-62163 | — | — | — | Oct 8, 2026 | Rejected reason: Reason: This candidate is a duplicate of CVE-2026-60089. |
| CVE-2026-61801 | MEDIUM | 5.5 | — | Oct 8, 2026 | The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and g... |
| CVE-2026-50055 | MEDIUM | 6.5 | — | Oct 8, 2026 | A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding ... |
| CVE-2026-50054 | HIGH | 7.1 | — | Oct 8, 2026 | An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authentica... |
| CVE-2026-10631 | MEDIUM | 6.5 | — | Oct 8, 2026 | An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authe... |
| CVE-2026-107709 | HIGH | 7.8 | — | Oct 8, 2026 | A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/d... |
| CVE-2026-107301 | MEDIUM | 6.5 | 0.4% | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty... |
| CVE-2026-107300 | HIGH | 7.5 | — | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively i... |
| CVE-2026-107299 | MEDIUM | 5.9 | 0.4% | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the re... |
| CVE-2026-107298 | MEDIUM | 5.3 | — | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths ha... |
| CVE-2026-107297 | MEDIUM | 5.9 | — | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an i... |
| CVE-2026-107296 | LOW | 3.7 | 0.3% | Oct 8, 2026 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit i... |
| CVE-2026-107295 | HIGH | 7.6 | 0.2% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.... |
| CVE-2026-107294 | MEDIUM | 6.5 | 0.4% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.... |
| CVE-2026-107293 | MEDIUM | 5.3 | 0.3% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.1... |
| CVE-2026-107292 | MEDIUM | 6.4 | 0.1% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.... |
| CVE-2026-107291 | MEDIUM | 4.3 | 0.4% | Oct 8, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.1... |