Browse All CVEs
13,223 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-7872 |
high | 8.1 | 0.0062 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary f | |
CVE-2026-8056 |
high | 8.8 | 0.0053 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component par | |
CVE-2026-13445 |
high | 8.1 | 0.0035 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the S | |
CVE-2026-50271 |
high | 7.5 | 0.0079 | 2026-10-29 | Datadog dd-trace-py is the Datadog Python APM client. Prior to 4.8.2, Datadog tracing libr | |
CVE-2026-50272 |
high | 7.5 | 0.0079 | 2026-10-29 | dd-trace is the Datadog APM client for Node.js. Prior to 5.100.0, W3C baggage propagation | |
CVE-2026-50274 |
high | 7.5 | 0.0079 | 2026-10-29 | Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, | |
CVE-2026-53727 |
high | 8.9 | 0.0051 | 2026-10-29 | css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parser#read_remote_fil | |
CVE-2026-54498 |
high | 8.7 | 0.0045 | 2026-10-29 | view_component is a framework for building reusable, testable, and encapsulated view compo | |
CVE-2026-49485 |
high | 7.5 | 0.0068 | 2026-10-29 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperab | |
CVE-2026-56740 |
high | 7.5 | 0.0059 | 2026-10-29 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, t | |
CVE-2026-56741 |
high | 7.5 | 0.0060 | 2026-10-29 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, t | |
CVE-2026-47866 |
high | 8.3 | 0.0038 | 2026-10-29 | VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor | |
CVE-2026-47867 |
high | 8.8 | 0.0074 | 2026-10-29 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user | |
CVE-2026-47868 |
high | 7.8 | 0.0014 | 2026-10-29 | VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious | |
CVE-2026-47869 |
high | 8.8 | 0.0074 | 2026-10-29 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authe | |
CVE-2026-47870 |
high | 8.8 | 0.0042 | 2026-10-29 | VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authen | |
CVE-2026-47871 |
high | 8.8 | 0.0096 | 2026-10-29 | VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path | |
CVE-2026-16095 |
high | 8.7 | 0.0073 | 2026-10-29 | A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issu | |
CVE-2026-16096 |
high | 8.7 | 0.0054 | 2026-10-29 | A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects | |
CVE-2026-16097 |
high | 8.7 | 0.0079 | 2026-10-29 | A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function s | |
CVE-2026-59173 |
high | 7.5 | 0.0074 | 2026-10-29 | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affe | |
CVE-2026-9147 |
high | 8.5 | 0.0022 | 2026-10-29 | uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a | |
CVE-2023-54366 |
high | 8.7 | 0.0046 | 2026-10-29 | SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SE | |
CVE-2024-58357 |
high | 7.1 | 0.0045 | 2026-10-29 | SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::t | |
CVE-2024-58359 |
high | 7.1 | 0.0045 | 2026-10-29 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting m | |
CVE-2024-58361 |
high | 7.1 | 0.0045 | 2026-10-29 | SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in th | |
CVE-2024-58362 |
high | 8.7 | 0.0064 | 2026-10-29 | SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in | |
CVE-2024-58364 |
high | 7.1 | 0.0045 | 2026-10-29 | SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in sp | |
CVE-2024-58365 |
high | 7.1 | 0.0045 | 2026-10-29 | SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query e | |
CVE-2024-58367 |
high | 7.1 | 0.0036 | 2026-10-29 | SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, | |
CVE-2024-58368 |
high | 8.7 | 0.0065 | 2026-10-29 | SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP | |
CVE-2024-58369 |
high | 7.1 | 0.0045 | 2026-10-29 | SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters | |
CVE-2024-58370 |
high | 7.1 | 0.0049 | 2026-10-29 | SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested | |
CVE-2026-11826 |
high | 8.7 | 0.0075 | 2026-10-29 | OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/co | |
CVE-2026-53994 |
high | 7.7 | 0.0045 | 2026-10-29 | ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP | |
CVE-2026-10130 |
high | 8.8 | 0.0056 | 2026-10-29 | QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated at | |
CVE-2026-63809 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for | |
CVE-2026-63823 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key | |
CVE-2026-63824 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in | |
CVE-2026-63829 |
high | 8.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require | |
CVE-2026-63831 |
high | 8.8 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add | |
CVE-2026-63832 |
high | 8.8 | 0.0029 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid | |
CVE-2026-63833 |
high | 7.1 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct | |
CVE-2026-63840 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set | |
CVE-2026-63841 |
high | 7.8 | 0.0017 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set | |
CVE-2026-63842 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set | |
CVE-2026-63843 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set | |
CVE-2026-63844 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set | |
CVE-2026-63845 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set | |
CVE-2026-63846 |
high | 7.8 | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set |