Browse All CVEs
13,605 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-39924 |
high | 7.6 | 0.0037 | 2026-10-29 | Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows a | |
CVE-2026-48834 |
high | 7.5 | 0.0076 | 2026-10-29 | Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This | |
CVE-2026-48911 |
high | 7.5 | 0.0057 | 2026-10-29 | Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue | |
CVE-2026-60023 |
high | 7.5 | 0.0062 | 2026-10-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. | |
CVE-2026-7326 |
high | 8.8 | 0.0021 | 2026-10-29 | A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server be | |
CVE-2026-7327 |
high | 8.1 | 0.0039 | 2026-10-29 | An improper privilege management vulnerability in the REST API document processing pipelin | |
CVE-2026-9203 |
high | 8.5 | 0.0034 | 2026-10-29 | A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and | |
CVE-2026-17623 |
high | 8.8 | 0.0079 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execu | |
CVE-2026-17626 |
high | 8.8 | 0.0042 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to re | |
CVE-2026-17630 |
high | 8.8 | 0.0076 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary c | |
CVE-2026-20124 |
high | 7.7 | 0.0050 | 2026-10-29 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE | |
CVE-2026-20200 |
high | 8.8 | 0.0073 | 2026-10-29 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenti | |
CVE-2026-20263 |
high | 8.6 | 0.0057 | 2026-10-29 | A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE | |
CVE-2026-20268 |
high | 8.6 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20269 |
high | 8.6 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20270 |
high | 8.6 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20271 |
high | 8.6 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20273 |
high | 8.6 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20312 |
high | 8.8 | 0.0031 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-20313 |
high | 7.7 | 0.0042 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-8446 |
high | 7.5 | 0.0049 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in th | |
CVE-2026-70431 |
high | 8.8 | 0.0064 | 2026-10-29 | Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features | |
CVE-2026-70432 |
high | 8.8 | 0.0030 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9 | |
CVE-2026-70448 |
high | 7.1 | 0.0032 | 2026-10-29 | Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML | |
CVE-2026-9081 |
high | 7.1 | 0.0031 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Req | |
CVE-2026-10547 |
high | 8.1 | 0.0040 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecat | |
CVE-2026-17624 |
high | 8.8 | 0.0068 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 t | |
CVE-2026-17632 |
high | 8.8 | 0.0088 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execu | |
CVE-2026-17633 |
high | 8.8 | 0.0068 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execu | |
CVE-2026-18485 |
high | 8.5 | 0.0017 | 2026-10-29 | There is a local privilege escalation vulnerability recently discovered in the NI-PAL kern | |
CVE-2026-8182 |
high | 8.8 | 0.0065 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execut | |
CVE-2026-8183 |
high | 7.7 | 0.0056 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 t | |
CVE-2026-8478 |
high | 8.8 | 0.0063 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary co | |
CVE-2026-9130 |
high | 7.1 | 0.0030 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the | |
CVE-2026-9196 |
high | 8.8 | 0.0053 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute uni | |
CVE-2026-9201 |
high | 8.8 | 0.0037 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arb | |
CVE-2026-17556 |
high | 8.8 | 0.0080 | 2026-10-29 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an | |
CVE-2026-55522 |
high | 7.8 | 0.0022 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai a | |
CVE-2026-55523 |
high | 7.7 | 0.0047 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonai | |
CVE-2026-55524 |
high | 7.5 | 0.0024 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool p | |
CVE-2026-66298 |
high | 8.6 | 0.0027 | 2026-10-29 | Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook o | |
CVE-2026-66881 |
high | 7.0 | 0.0061 | 2026-10-29 | Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored | |
CVE-2026-68746 |
high | 7.7 | 0.0080 | 2026-10-29 | Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an una | |
CVE-2026-69111 |
high | 8.7 | 0.0110 | 2026-10-29 | Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerabilit | |
CVE-2026-19024 |
high | 8.2 | 0.0019 | 2026-10-29 | NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cau | |
CVE-2026-67866 |
high | 7.5 | 0.0082 | 2026-10-29 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a | |
CVE-2026-67867 |
high | 7.5 | 0.0054 | 2026-10-29 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a | |
CVE-2026-67871 |
high | 7.5 | 0.0082 | 2026-10-29 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a | |
CVE-2026-67872 |
high | 7.5 | 0.0050 | 2026-10-29 | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via | |
CVE-2024-6832 |
high | 7.5 | 0.0041 | 2026-10-29 | The account locking mechanism fails to trigger when secondary user stores are inaccessible |