CVE Vulnerability Database
Search and browse 425,066 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102795 | CRITICAL | 9.3 | — | Oct 2, 2026 | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 ... |
| CVE-2026-102626 | HIGH | 7.2 | — | Oct 2, 2026 | An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScri... |
| CVE-2026-104854 | HIGH | 8.5 | — | Oct 2, 2026 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix do... |
| CVE-2026-104853 | MEDIUM | 5.8 | — | Oct 2, 2026 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration pla... |
| CVE-2026-104851 | HIGH | 8.8 | 0.3% | Oct 2, 2026 | fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fssp... |
| CVE-2026-104849 | CRITICAL | 9.5 | 0.4% | Oct 2, 2026 | Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename from a caller-s... |
| CVE-2026-104848 | CRITICAL | 9.5 | — | Oct 2, 2026 | Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.1, Tinypool constructs ThreadPool.options ... |
| CVE-2026-96613 | MEDIUM | 6.5 | 0.2% | Oct 2, 2026 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to a... |
| CVE-2026-94544 | MEDIUM | 4.2 | 0.3% | Oct 2, 2026 | Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills... |
| CVE-2026-94543 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted... |
| CVE-2026-94486 | MEDIUM | 5.4 | 0.2% | Oct 2, 2026 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev developmen... |
| CVE-2026-94485 | MEDIUM | 5.3 | 0.2% | Oct 2, 2026 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` developm... |
| CVE-2026-94484 | MEDIUM | 4.8 | 0.3% | Oct 2, 2026 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, application... |
| CVE-2026-94483 | MEDIUM | 6.5 | 0.2% | Oct 2, 2026 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can ... |
| CVE-2026-67989 | HIGH | 7.5 | — | Oct 2, 2026 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-o... |
| CVE-2026-51922 | CRITICAL | 9.8 | 0.3% | Oct 2, 2026 | agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending o... |
| CVE-2026-51918 | CRITICAL | 9.8 | 0.2% | Oct 2, 2026 | FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code (). |
| CVE-2026-51917 | HIGH | 7.3 | 0.2% | Oct 2, 2026 | FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code. |
| CVE-2026-51916 | HIGH | 7.5 | — | Oct 2, 2026 | TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in super... |
| CVE-2026-51915 | CRITICAL | 9.8 | 0.2% | Oct 2, 2026 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller. In affected source... |
| CVE-2026-51914 | HIGH | 8.8 | 0.2% | Oct 2, 2026 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affec... |
| CVE-2026-51911 | CRITICAL | 9.8 | 0.4% | Oct 2, 2026 | vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Dep... |
| CVE-2026-51907 | HIGH | 8.1 | — | Oct 2, 2026 | In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows at... |
| CVE-2026-51906 | CRITICAL | 9.1 | 0.1% | Oct 2, 2026 | In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows... |
| CVE-2026-51904 | CRITICAL | 9.8 | 0.2% | Oct 2, 2026 | SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected ... |