Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:94"
626 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8635 |
critical | 9.9 | 0.0059 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser | |
CVE-2026-59543 |
critical | 9.9 | 0.0079 | 2026-07-23 | Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions. | |
CVE-2026-13435 |
critical | 9.9 | 0.0053 | 2026-07-30 | IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the Pyt | |
CVE-2026-12946 |
critical | 9.9 | 0.0063 | 2026-07-30 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the | |
CVE-2026-65548 |
critical | 9.9 | 0.0079 | 2026-08-06 | Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions. | |
CVE-2026-73268 |
critical | 9.9 | 0.0088 | 2026-08-12 | A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant | |
CVE-2026-32444 |
critical | 9.9 | 0.0079 | 2026-08-18 | Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions. | |
CVE-2026-53942 |
critical | 9.9 | 0.0032 | 2026-10-23 | Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commi | |
CVE-2026-115188 |
critical | 9.9 | 0.0073 | 2026-10-26 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When pr | |
CVE-2024-11080 |
critical | 9.8 | 0.0081 | 2026-09-05 | The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticat | |
CVE-2024-31026 |
critical | 9.8 | 0.0075 | 2026-09-29 | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker | |
CVE-2026-116692 |
critical | 9.8 | 0.0070 | 2026-10-27 | MLflow is an open source AI engineering platform for agents, large language models, and machine lear | |
CVE-2019-15598 |
critical | 9.8 | — | 2019-12-18 | A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker | |
CVE-2026-33943 |
critical | 9.8 | 0.0065 | 2026-03-27 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. In v | |
CVE-2026-40288 |
critical | 9.8 | 0.0061 | 2026-04-14 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of prais | |
CVE-2026-30993 |
critical | 9.8 | 0.0052 | 2026-04-15 | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in t | |
CVE-2026-33608 |
critical | 9.8 | 0.0038 | 2026-04-22 | An attacker can send a notify request that causes a new secondary domain to be added to the bind bac | |
CVE-2026-3960 |
critical | 9.8 | 0.0094 | 2026-04-23 | A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/I | |
CVE-2025-63706 |
critical | 9.8 | 0.0152 | 2026-05-07 | NPM package next-npm-version1.0.1 is vulnerable to Command injection. | |
CVE-2026-41507 |
critical | 9.8 | 0.0039 | 2026-05-08 | math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal co | |
CVE-2025-65719 |
critical | 9.8 | 0.0058 | 2026-05-12 | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a vi | |
CVE-2026-44717 |
critical | 9.8 | 0.0048 | 2026-05-15 | MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. | |
CVE-2026-44887 |
critical | 9.8 | 0.0054 | 2026-05-27 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Aler | |
CVE-2026-44888 |
critical | 9.8 | 0.0039 | 2026-05-27 | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Aler | |
CVE-2026-54133 |
critical | 9.8 | 0.0044 | 2026-06-12 | jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elem | |
CVE-2026-9072 |
critical | 9.8 | 0.0072 | 2026-06-22 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intellige | |
CVE-2026-10109 |
critical | 9.8 | 0.0086 | 2026-06-30 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due | |
CVE-2026-52200 |
critical | 9.8 | 0.0093 | 2026-07-08 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrar | |
CVE-2026-38450 |
critical | 9.8 | 0.0104 | 2026-07-14 | An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitra | |
CVE-2026-9198 |
critical | 9.8 | 0.2866 | 2026-07-17 | KEV | Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve fu |
CVE-2026-52656 |
critical | 9.8 | 0.0073 | 2026-07-20 | An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C an | |
CVE-2026-64815 |
critical | 9.8 | 0.0048 | 2026-07-23 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form | |
CVE-2026-17561 |
critical | 9.8 | 0.0056 | 2026-07-31 | Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecom | |
CVE-2026-51785 |
critical | 9.8 | 0.0115 | 2026-07-31 | An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary co | |
CVE-2026-71278 |
critical | 9.8 | 0.0066 | 2026-08-05 | rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_ | |
CVE-2026-42537 |
critical | 9.8 | 0.0129 | 2026-08-10 | Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgr | |
CVE-2026-44416 |
critical | 9.8 | 0.0124 | 2026-08-10 | Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apach | |
CVE-2026-55799 |
critical | 9.8 | 0.0122 | 2026-08-10 | Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are | |
CVE-2026-73649 |
critical | 9.8 | 0.0073 | 2026-08-13 | Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, t | |
CVE-2026-50772 |
critical | 9.8 | 0.0068 | 2026-08-17 | An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via | |
CVE-2026-67960 |
critical | 9.8 | 0.0073 | 2026-08-17 | An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController. | |
CVE-2026-38165 |
critical | 9.8 | 0.0087 | 2026-08-17 | A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration | |
CVE-2026-67919 |
critical | 9.8 | 0.0093 | 2026-08-17 | An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.ja | |
CVE-2026-77647 |
critical | 9.8 | 0.0229 | 2026-08-20 | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited i | |
CVE-2026-48360 |
critical | 9.6 | 0.0045 | 2026-10-27 | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerabil | |
CVE-2026-33976 |
critical | 9.6 | 0.0072 | 2026-03-27 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a | |
CVE-2026-42090 |
critical | 9.6 | 0.0048 | 2026-05-04 | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop | |
CVE-2026-44482 |
critical | 9.6 | 0.0034 | 2026-05-14 | soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock sup | |
CVE-2026-45311 |
critical | 9.6 | 0.0057 | 2026-05-28 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool ex | |
CVE-2026-45374 |
critical | 9.6 | 0.0039 | 2026-05-28 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the task_create tool spawn |