Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107329 |
high | 8.8 | 0.0085 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107328 |
high | 8.8 | 0.0085 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107327 |
high | 8.8 | 0.0067 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107326 |
high | 8.8 | 0.0070 | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107030 |
high | 7.5 | 0.0034 | 2026-10-29 | Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unau | |
CVE-2026-107029 |
critical | 9.1 | 0.0037 | 2026-10-29 | Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an | |
CVE-2026-104339 |
critical | 9.8 | 0.0075 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary c | |
CVE-2026-104331 |
medium | 5.4 | 0.0018 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). | |
CVE-2026-104328 |
high | 8.8 | 0.0070 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-104324 |
high | 8.8 | 0.0066 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-104317 |
critical | 9.8 | 0.0059 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the me | |
CVE-2026-104316 |
medium | 6.5 | 0.0033 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any | |
CVE-2026-104315 |
medium | 4.3 | 0.0021 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). | |
CVE-2026-104314 |
medium | 6.5 | 0.0032 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or | |
CVE-2026-104312 |
medium | 6.8 | 0.0024 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a s | |
CVE-2026-104310 |
medium | 4.3 | 0.0026 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtai | |
CVE-2026-104309 |
medium | 6.5 | 0.0060 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtai | |
CVE-2026-104308 |
medium | 4.3 | 0.0034 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause | |
CVE-2026-103092 |
high | 8.8 | 0.0041 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-102590 |
high | 7.7 | 0.0029 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtai | |
CVE-2026-101288 |
high | 8.8 | 0.0070 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execu | |
CVE-2026-107024 |
high | 7.5 | 0.0026 | 2026-10-29 | Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers | |
CVE-2026-107023 |
medium | 6.5 | 0.0026 | 2026-10-29 | Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unaut | |
CVE-2026-107021 |
critical | 9.1 | 0.0034 | 2026-10-29 | Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo | |
CVE-2026-54853 |
medium | 5.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows E | |
CVE-2026-27063 |
medium | 5.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exp | |
CVE-2026-115601 |
medium | 5.3 | 0.0018 | 2026-10-29 | Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-f | |
CVE-2026-114706 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-101897 |
medium | 5.1 | 0.0035 | 2026-10-29 | Angular is a development platform for building mobile and desktop web applications using T | |
CVE-2026-100394 |
medium | 6.5 | 0.0050 | 2026-10-29 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-97073 |
medium | 5.3 | 0.0026 | 2026-10-29 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly | |
CVE-2026-54852 |
medium | 5.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and | |
CVE-2026-42691 |
medium | 5.4 | 0.0019 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime ev | |
CVE-2026-27062 |
medium | 4.3 | 0.0010 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allo | |
CVE-2026-118097 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-107017 |
critical | 9.1 | 0.0034 | 2026-10-29 | Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 a | |
CVE-2026-107016 |
high | 7.5 | 0.0034 | 2026-10-29 | Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read an | |
CVE-2026-107015 |
critical | 9.1 | 0.0050 | 2026-10-29 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers t | |
CVE-2026-107014 |
critical | 9.1 | 0.0030 | 2026-10-29 | Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized | |
CVE-2026-86016 |
high | 8.2 | 0.0028 | 2026-10-29 | VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerH | |
CVE-2026-104875 |
high | 7.1 | 0.0041 | 2026-10-29 | Ente provides end-to-end encrypted cloud services and security tools. Prior to server imag | |
CVE-2026-107020 |
high | 7.5 | 0.0058 | 2026-10-29 | An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader ver | |
CVE-2026-107019 |
high | 8.8 | 0.0032 | 2026-10-29 | Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 ve | |
CVE-2026-107018 |
high | 8.1 | 0.0029 | 2026-10-29 | Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized a | |
CVE-2026-25448 |
medium | 4.3 | 0.0023 | 2026-10-29 | Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Con | |
CVE-2026-92982 |
high | 8.5 | 0.0047 | 2026-10-29 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit | |
CVE-2026-77564 |
low | 3.3 | 0.0013 | 2026-10-29 | Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and | |
CVE-2026-67414 |
medium | 6.0 | 0.0063 | 2026-10-29 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and | |
CVE-2026-100404 |
medium | 6.5 | 0.0042 | 2026-10-29 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, gu | |
CVE-2026-80069 |
medium | 5.3 | 0.0035 | 2026-10-29 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulner |