CVE Vulnerability Database
Search and browse 425,066 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-51901 | HIGH | 8.1 | 0.2% | Oct 2, 2026 | SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecu... |
| CVE-2026-51899 | MEDIUM | 4.3 | — | Oct 2, 2026 | In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/... |
| CVE-2026-51898 | CRITICAL | 9.8 | 0.2% | Oct 2, 2026 | sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute. |
| CVE-2026-104914 | MEDIUM | 5.3 | 0.2% | Oct 2, 2026 | MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. ... |
| CVE-2026-104912 | HIGH | 7.1 | 0.2% | Oct 2, 2026 | MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attri... |
| CVE-2026-104910 | MEDIUM | 5.3 | 0.3% | Oct 2, 2026 | MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of even... |
| CVE-2026-104908 | HIGH | 7.1 | — | Oct 2, 2026 | MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint... |
| CVE-2026-104907 | MEDIUM | 4.8 | — | Oct 2, 2026 | MISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page. When a linked (remote) MISP s... |
| CVE-2026-104906 | MEDIUM | 6.2 | — | Oct 2, 2026 | MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII obje... |
| CVE-2026-104901 | MEDIUM | 5.1 | — | Oct 2, 2026 | MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature. When a user views the ID Translat... |
| CVE-2026-104900 | MEDIUM | 5.3 | — | Oct 2, 2026 | MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview... |
| CVE-2026-104847 | HIGH | 8.5 | — | Oct 2, 2026 | ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42... |
| CVE-2026-104846 | CRITICAL | 9.8 | 0.3% | Oct 2, 2026 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12... |
| CVE-2026-104845 | HIGH | 7.5 | 0.4% | Oct 2, 2026 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to ... |
| CVE-2026-104844 | MEDIUM | 5.9 | — | Oct 2, 2026 | PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, s... |
| CVE-2026-104843 | MEDIUM | 5.9 | — | Oct 2, 2026 | uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows ca... |
| CVE-2026-103648 | CRITICAL | 9.1 | 0.4% | Oct 2, 2026 | Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded respons... |
| CVE-2026-103631 | HIGH | 8.8 | 0.3% | Oct 2, 2026 | Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-103630 | CRITICAL | 9.6 | 0.2% | Oct 2, 2026 | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outs... |
| CVE-2026-103629 | MEDIUM | 4.3 | 0.2% | Oct 2, 2026 | Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via... |
| CVE-2026-103628 | CRITICAL | 9.6 | 0.3% | Oct 2, 2026 | Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-103627 | MEDIUM | 6.5 | 0.2% | Oct 2, 2026 | Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive informatio... |
| CVE-2026-103626 | CRITICAL | 9.6 | 0.3% | Oct 2, 2026 | Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker le... |
| CVE-2026-103625 | HIGH | 8.8 | 0.3% | Oct 2, 2026 | Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-103624 | HIGH | 8.3 | 0.3% | Oct 2, 2026 | Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who h... |