Browse All CVEs
3,601 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-69253 |
critical | 9.0 | 0.0066 | 2026-10-29 | Flowise is a drag-and-drop user interface for building customized large language model (LL | |
CVE-2026-69254 |
critical | 9.4 | 0.0069 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-58072 |
critical | 9.0 | 0.0053 | 2026-10-29 | A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the man | |
CVE-2026-58073 |
critical | 9.5 | 0.0032 | 2026-10-29 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to | |
CVE-2026-63455 |
critical | 9.8 | 0.0080 | 2026-10-29 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator c | |
CVE-2026-63456 |
critical | 9.8 | 0.0080 | 2026-10-29 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator c | |
CVE-2026-64633 |
critical | 10.0 | 0.0060 | 2026-10-29 | A vulnerability allowing remote unauthenticated code execution on the agent host. | |
CVE-2026-69255 |
critical | 9.2 | 0.0060 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-69256 |
critical | 9.4 | 0.0101 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-69259 |
critical | 9.4 | 0.0082 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-24254 |
critical | 9.8 | 0.0089 | 2026-10-29 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where | |
CVE-2026-69264 |
critical | 9.4 | 0.0111 | 2026-10-29 | Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFil | |
CVE-2026-70470 |
critical | 9.5 | 0.0097 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-0163 |
critical | 9.8 | 0.0038 | 2026-10-29 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use afte | |
CVE-2026-69703 |
critical | 9.3 | 0.0059 | 2026-10-29 | Atlas-Livre contains an improper access control vulnerability in the admin controllers und | |
CVE-2026-70477 |
critical | 9.5 | 0.0081 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-70478 |
critical | 9.2 | 0.0062 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-70552 |
critical | 9.3 | 0.0083 | 2026-10-29 | MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX | |
CVE-2026-70553 |
critical | 9.3 | 0.0127 | 2026-10-29 | MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated att | |
CVE-2026-66902 |
critical | 9.8 | 0.0070 | 2026-10-29 | Google::Auth versions before 0.06 for Perl run a command named in an external_account cred | |
CVE-2026-70554 |
critical | 9.3 | 0.0123 | 2026-10-29 | MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated atta | |
CVE-2026-61484 |
critical | 9.8 | 0.0081 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache | |
CVE-2026-61486 |
critical | 9.8 | 0.0081 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. | |
CVE-2026-70376 |
critical | 9.6 | 0.0020 | 2026-10-29 | Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDo | |
CVE-2026-71207 |
critical | 9.8 | 0.0071 | 2026-10-29 | The Stock-Inventory-Management-System application's login.php assigns raw username/passwor | |
CVE-2026-71214 |
critical | 9.8 | 0.0048 | 2026-10-29 | The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app. | |
CVE-2026-10059 |
critical | 9.1 | 0.0064 | 2026-10-29 | A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A te | |
CVE-2026-10090 |
critical | 9.0 | 0.0058 | 2026-10-29 | A flaw was found in the Application Subscription controller (multicluster-operators-subscr | |
CVE-2026-44945 |
critical | 9.1 | 0.0056 | 2026-10-29 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/aut | |
CVE-2026-71231 |
critical | 9.8 | 0.0066 | 2026-10-29 | IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT | |
CVE-2026-71238 |
critical | 9.1 | 0.0044 | 2026-10-29 | DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/sett | |
CVE-2026-71254 |
critical | 9.8 | 0.0055 | 2026-10-29 | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handl | |
CVE-2026-71256 |
critical | 9.8 | 0.0055 | 2026-10-29 | nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer | |
CVE-2026-71263 |
critical | 9.1 | 0.0050 | 2026-10-29 | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (dem | |
CVE-2026-71267 |
critical | 9.8 | 0.0055 | 2026-10-29 | microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) cop | |
CVE-2026-71268 |
critical | 9.9 | 0.0058 | 2026-10-29 | OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives fro | |
CVE-2026-71277 |
critical | 9.1 | 0.0042 | 2026-10-29 | rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks w | |
CVE-2026-71278 |
critical | 9.8 | 0.0066 | 2026-10-29 | rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/contro | |
CVE-2026-71289 |
critical | 9.8 | 0.0068 | 2026-10-29 | The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's de | |
CVE-2026-10025 |
critical | 9.8 | 0.0065 | 2026-10-29 | IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an X | |
CVE-2026-15587 |
critical | 9.4 | 0.0023 | 2026-10-29 | Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 o | |
CVE-2026-39923 |
critical | 9.2 | 0.0043 | 2026-10-29 | Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allo | |
CVE-2026-60053 |
critical | 9.1 | 0.0057 | 2026-10-29 | Insufficient Session Expiration vulnerability in Apache Answer. This issue affects Apache | |
CVE-2026-7329 |
critical | 9.9 | 0.0057 | 2026-10-29 | An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query in | |
CVE-2026-7557 |
critical | 9.1 | 0.0046 | 2026-10-29 | An improper verification of cryptographic signature vulnerability in the SAML authenticati | |
CVE-2026-8709 |
critical | 9.9 | 0.0046 | 2026-10-29 | An improper privilege management vulnerability in the REST API document patch operation of | |
CVE-2026-9190 |
critical | 9.1 | 0.0074 | 2026-10-29 | An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Serve | |
CVE-2026-9192 |
critical | 9.8 | 0.0083 | 2026-10-29 | An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server | |
CVE-2026-9193 |
critical | 9.9 | 0.0046 | 2026-10-29 | An improper privilege management vulnerability in the Hadoop integration of Progress MarkL | |
CVE-2026-9195 |
critical | 9.3 | 0.0065 | 2026-10-29 | A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server bef |