Browse All CVEs
32,067 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-3340 |
medium | 6.5 | 0.0017 | 2026-10-29 | IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request | |
CVE-2026-3346 |
medium | 6.4 | 0.0016 | 2026-10-29 | IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site script | |
CVE-2026-40949 |
medium | 6.8 | 0.0010 | 2026-10-29 | CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client pri | |
CVE-2026-40950 |
high | 7.1 | 0.0025 | 2026-10-29 | CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14 | |
CVE-2026-40951 |
medium | 6.8 | 0.0009 | 2026-10-29 | CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prio | |
CVE-2026-4502 |
medium | 6.5 | 0.0027 | 2026-10-29 | IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to | |
CVE-2026-4503 |
high | 7.5 | 0.0034 | 2026-10-29 | IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to v | |
CVE-2026-7435 |
high | 8.6 | 0.0053 | 2026-10-29 | SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the qu | |
CVE-2026-7501 |
low | 2.0 | 0.0025 | 2026-10-29 | A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the func | |
CVE-2026-1577 |
medium | 6.5 | 0.0034 | 2026-10-29 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (incl | |
CVE-2026-2311 |
critical | 9.8 | 0.0020 | 2026-10-29 | IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invali | |
CVE-2026-3345 |
medium | 6.5 | 0.0037 | 2026-10-29 | IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directorie | |
CVE-2026-6389 |
high | 7.8 | 0.0013 | 2026-10-29 | IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource | |
CVE-2026-6542 |
high | 8.1 | 0.0020 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read tran | |
CVE-2026-6543 |
high | 8.8 | 0.0047 | 2026-10-29 | IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary | |
CVE-2026-7502 |
low | 2.1 | 0.0026 | 2026-10-29 | A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affe | |
CVE-2026-7503 |
high | 7.4 | 0.0045 | 2026-10-29 | A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted elemen | |
CVE-2026-7551 |
high | 8.7 | 0.0065 | 2026-10-29 | HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash comm | |
CVE-2026-28909 |
medium | 6.5 | 0.0020 | 2026-10-29 | Users who connect to malicious registries with hostnames matching the bypass patterns will | |
CVE-2026-7505 |
medium | 5.5 | 0.0038 | 2026-10-29 | A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects | |
CVE-2026-7506 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts | |
CVE-2026-7508 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of | |
CVE-2026-7510 |
low | 2.1 | 0.0028 | 2026-10-29 | A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerabi | |
CVE-2026-22726 |
medium | 5.0 | 0.0020 | 2026-10-29 | Route Services can be leveraged to send app traffic to network destinations outside of an | |
CVE-2026-5405 |
— | — | 0.0016 | 2026-10-29 | RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial | |
CVE-2026-7512 |
high | 7.4 | 0.0047 | 2026-10-29 | A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the fu | |
CVE-2026-7513 |
high | 7.4 | 0.0047 | 2026-10-29 | A vulnerability has been found in UTT HiPER 1200GW up to 2.5.3-170306. The impacted elemen | |
CVE-2026-7519 |
medium | 5.5 | 0.0042 | 2026-10-29 | A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown fu | |
CVE-2026-7538 |
high | 8.9 | 0.0182 | 2026-10-29 | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects | |
CVE-2026-7545 |
medium | 5.5 | 0.0026 | 2026-10-29 | A weakness has been identified in SourceCodester Advanced School Management System 1.0. Th | |
CVE-2026-7546 |
high | 8.9 | 0.0075 | 2026-10-29 | A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The | |
CVE-2026-7548 |
high | 7.4 | 0.0149 | 2026-10-29 | A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the f | |
CVE-2026-42994 |
high | 8.8 | 0.0031 | 2026-10-29 | Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm | |
CVE-2026-7549 |
medium | 5.5 | 0.0027 | 2026-10-29 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impa | |
CVE-2026-7550 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. | |
CVE-2026-7553 |
low | 2.0 | 0.0021 | 2026-10-29 | A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vul | |
CVE-2024-13362 |
medium | 6.1 | 0.0028 | 2026-10-29 | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Script | |
CVE-2026-7554 |
low | 2.9 | 0.0110 | 2026-10-29 | A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some | |
CVE-2026-7555 |
medium | 5.5 | 0.0026 | 2026-10-29 | A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects | |
CVE-2026-42996 |
critical | 10.0 | 0.0057 | 2026-10-29 | JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow v | |
CVE-2026-7584 |
high | 8.4 | 0.0026 | 2026-10-29 | The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynami | |
CVE-2026-40201 |
medium | 5.4 | 0.0024 | 2026-10-29 | @diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title | |
CVE-2026-42402 |
high | 7.5 | 0.0071 | 2026-10-29 | Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity i | |
CVE-2026-42403 |
high | 7.5 | 0.0076 | 2026-10-29 | Apache Neethi does not properly detect circular references in policy definitions. When a W | |
CVE-2026-43001 |
high | 8.0 | 0.0047 | 2026-10-29 | An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not | |
CVE-2026-43003 |
high | 7.5 | 0.0098 | 2026-10-29 | An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Pyth | |
CVE-2026-42404 |
high | 7.2 | 0.0050 | 2026-10-29 | Apache Neethi does not impose any restrictions on URIs when manually fetching remote polic | |
CVE-2026-42778 |
critical | 9.8 | 0.0066 | 2026-10-29 | The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the o | |
CVE-2026-42779 |
critical | 9.8 | 0.0123 | 2026-10-29 | The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the o | |
CVE-2026-7579 |
medium | 5.5 | 0.0029 | 2026-10-29 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue |