Browse All CVEs
50,449 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49951 |
medium | 5.3 | 0.0025 | 2026-11-06 | RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows aut | |
CVE-2026-123859 |
high | 8.1 | 0.0037 | 2026-11-06 | When identifier escaping is disabled through a non-default configuration, the write_pandas | |
CVE-2026-123858 |
medium | 4.4 | 0.0015 | 2026-11-06 | In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a dep | |
CVE-2026-123857 |
medium | 4.3 | 0.0026 | 2026-11-06 | In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD rules | |
CVE-2026-123856 |
medium | 6.5 | 0.0033 | 2026-11-06 | In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons | |
CVE-2026-123855 |
high | 7.5 | 0.0068 | 2026-11-06 | In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise config | |
CVE-2026-123854 |
medium | 5.5 | 0.0017 | 2026-11-06 | In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted | |
CVE-2026-123853 |
high | 7.8 | 0.0017 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mo | |
CVE-2026-123852 |
high | 7.4 | 0.0038 | 2026-11-06 | In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was | |
CVE-2026-123851 |
medium | 5.4 | 0.0025 | 2026-11-06 | In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypasse | |
CVE-2026-123850 |
low | 3.5 | 0.0021 | 2026-11-06 | In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams v | |
CVE-2026-123849 |
high | 7.0 | 0.0014 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects | |
CVE-2026-123848 |
high | 7.4 | 0.0020 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS | |
CVE-2026-123847 |
medium | 5.3 | 0.0015 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control charac | |
CVE-2026-123846 |
medium | 4.3 | 0.0026 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in | |
CVE-2026-123845 |
low | 3.3 | 0.0017 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema refer | |
CVE-2026-123844 |
medium | 5.3 | 0.0027 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories | |
CVE-2026-123843 |
low | 3.3 | 0.0015 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG a | |
CVE-2026-123842 |
high | 7.1 | 0.0017 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks wh | |
CVE-2026-123841 |
high | 7.8 | 0.0019 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an im | |
CVE-2026-123840 |
medium | 4.7 | 0.0020 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development | |
CVE-2026-123839 |
medium | 4.7 | 0.0025 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was p | |
CVE-2026-123838 |
high | 7.8 | 0.0017 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI D | |
CVE-2026-123837 |
high | 7.8 | 0.0053 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untr | |
CVE-2026-123836 |
high | 8.8 | 0.0048 | 2026-11-06 | In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH p | |
CVE-2026-123835 |
medium | 5.9 | 0.0066 | 2026-11-06 | In JetBrains Datalore before 2026.4 code execution was possible in another user's computat | |
CVE-2026-123834 |
high | 8.1 | 0.0029 | 2026-11-06 | In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed us | |
CVE-2026-123833 |
low | 3.6 | 0.0013 | 2026-11-06 | In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untr | |
CVE-2026-123832 |
critical | 9.6 | 0.0045 | 2026-11-06 | In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compila | |
CVE-2026-123831 |
critical | 9.6 | 0.0045 | 2026-11-06 | In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via M | |
CVE-2026-118515 |
high | 8.4 | 0.0058 | 2026-11-06 | The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInf | |
CVE-2026-53245 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vect | |
CVE-2026-53241 |
medium | 5.5 | 0.0016 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix | |
CVE-2026-53238 |
medium | 5.5 | 0.0012 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: netlabel: validate un | |
CVE-2026-53236 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTA | |
CVE-2026-53227 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix | |
CVE-2026-53219 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: | |
CVE-2026-53218 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr | |
CVE-2026-53213 |
medium | 5.5 | 0.0012 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc | |
CVE-2026-53208 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: rej | |
CVE-2026-53207 |
medium | 5.5 | 0.0009 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fi | |
CVE-2026-53206 |
medium | 5.5 | 0.0014 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bound | |
CVE-2026-53196 |
medium | 6.8 | 0.0027 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: f | |
CVE-2026-53195 |
high | 7.8 | 0.0014 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: f | |
CVE-2026-53190 |
medium | 5.5 | 0.0012 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_f | |
CVE-2026-53181 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ac | |
CVE-2026-53177 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL poi | |
CVE-2026-53168 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_not | |
CVE-2026-53167 |
medium | 5.5 | 0.0013 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTI | |
CVE-2026-53164 |
medium | 5.5 | 0.0016 | 2026-11-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Do not try |