CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118772 | HIGH | 7.5 | joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 an… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-103094 | NONE | — | ServiceNow has remediated an information disclosure vulnerability that was identified in the Service… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-103093 | NONE | — | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI P… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-60111 | NONE | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51912 | NONE | — | OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-l… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51905 | HIGH | 8.8 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51903 | NONE | — | SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51902 | NONE | — | SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpo… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51863 | NONE | — | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbg… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-51851 | NONE | — | modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118769 | NONE | — | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_c… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-118768 | NONE | — | Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command request… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118767 | MEDIUM | 4.8 | Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Pyt… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118766 | MEDIUM | 6.1 | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HT… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116566 | NONE | — | socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can ca… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107347 | HIGH | 8.4 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-102260 | MEDIUM | 4.3 | HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in sev… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-62374 | NONE | — | SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-11587 | HIGH | 7.2 | SQL injection allowing an authenticated user with access to ACL management to read and modify the Ce… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-119115 | HIGH | 8.5 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (a… |
T1190
T1059
+1
|
|
2026-10-29 |