CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-51866 | CRITICAL | 9.8 | In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later b… | — |
|
2026-09-30 |
| CVE-2026-51864 | CRITICAL | 9.1 | DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/… | — |
|
2026-09-30 |
| CVE-2026-51859 | CRITICAL | 9.1 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (sr… | — |
|
2026-09-30 |
| CVE-2026-51856 | CRITICAL | 9.8 | In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code … | — |
|
2026-09-30 |
| CVE-2026-102149 | CRITICAL | 9.4 | Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could b… | — |
|
2026-09-30 |
| CVE-2026-102147 | CRITICAL | 9.3 | A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attack… | — |
|
2026-09-30 |
| CVE-2026-102115 | CRITICAL | 9.8 | Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An u… | — |
|
2026-09-30 |
| CVE-2026-102106 | CRITICAL | 9.1 | Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administr… | — |
|
2026-09-30 |
| CVE-2026-102105 | CRITICAL | 9.1 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery… | — |
|
2026-09-30 |
| CVE-2026-102104 | CRITICAL | 9.1 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery… | — |
|
2026-09-30 |
| CVE-2026-102103 | CRITICAL | 9.1 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery… | — |
|
2026-09-30 |
| CVE-2026-102102 | CRITICAL | 9.1 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery… | — |
|
2026-09-30 |
| CVE-2026-102095 | CRITICAL | 9.1 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery… | — |
|
2026-09-30 |
| CVE-2026-55107 | CRITICAL | 10.0 | Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing exe… | — |
|
2026-09-30 |
| CVE-2026-103475 | CRITICAL | 9.1 | yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting … | — |
|
2026-09-30 |
| CVE-2026-100512 | CRITICAL | 9.8 | Contributor PHP Object Injection in Nested Pages <= 3.3.2 versions. | — |
|
2026-09-30 |
| CVE-2026-62308 | CRITICAL | 9.1 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6,… | — |
|
2026-09-30 |
| CVE-2026-55494 | CRITICAL | 9.8 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4,… | — |
|
2026-09-30 |
| CVE-2026-55181 | CRITICAL | 9.4 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3,… | — |
|
2026-09-30 |
| CVE-2026-55176 | CRITICAL | 9.0 | Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.… | — |
|
2026-09-30 |