Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:94"
637 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55771 |
high | 8.8 | 0.0057 | 2026-07-13 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained | |
CVE-2026-55773 |
high | 8.8 | 0.0052 | 2026-07-13 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained | |
CVE-2026-8056 |
high | 8.8 | 0.0053 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at | |
CVE-2026-47867 |
high | 8.8 | 0.0074 | 2026-07-18 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with netwo | |
CVE-2026-47869 |
high | 8.8 | 0.0074 | 2026-07-18 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated u | |
CVE-2026-16800 |
high | 8.8 | 0.0053 | 2026-07-24 | Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions Pow | |
CVE-2026-16801 |
high | 8.8 | 0.0053 | 2026-07-24 | Improper control of generation of code ('Code Injection') in the variables feature in Devolutions Po | |
CVE-2026-54653 |
high | 8.8 | 0.0071 | 2026-07-28 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct fr | |
CVE-2026-17922 |
high | 8.8 | 0.0044 | 2026-07-30 | Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-71235 |
high | 8.8 | 0.0052 | 2026-08-05 | Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts | |
CVE-2026-70431 |
high | 8.8 | 0.0064 | 2026-08-05 | Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do n | |
CVE-2026-17624 |
high | 8.8 | 0.0068 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.1 | |
CVE-2026-17632 |
high | 8.8 | 0.0088 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitra | |
CVE-2026-17633 |
high | 8.8 | 0.0068 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitra | |
CVE-2026-8182 |
high | 8.8 | 0.0065 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrar | |
CVE-2026-8478 |
high | 8.8 | 0.0063 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the | |
CVE-2026-9196 |
high | 8.8 | 0.0053 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended co | |
CVE-2026-65941 |
high | 8.8 | 0.0068 | 2026-08-12 | In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network a | |
CVE-2026-115895 |
high | 8.8 | 0.0037 | 2026-10-23 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From | |
CVE-2026-101288 |
high | 8.8 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitra | |
CVE-2026-104328 |
high | 8.8 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitra | |
CVE-2026-110193 |
high | 8.8 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authentica | |
CVE-2026-110309 |
high | 8.8 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra | |
CVE-2023-54345 |
high | 8.7 | 0.0061 | 2026-05-05 | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that all | |
CVE-2026-114126 |
high | 8.7 | 0.0053 | 2026-10-21 | Storybook is a frontend workshop for building user interface components and pages in isolation. From | |
CVE-2026-116811 |
high | 8.7 | 0.0049 | 2026-10-27 | OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allo | |
CVE-2026-32669 |
high | 8.7 | 0.0027 | 2026-03-27 | Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is explo | |
CVE-2026-34965 |
high | 8.7 | 0.0084 | 2026-04-29 | Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collection | |
CVE-2026-55794 |
high | 8.7 | 0.0041 | 2026-07-02 | Craft CMS is a content management system (CMS). In versions 5.9.0 and above prior to 5.10.0, control | |
CVE-2026-46633 |
high | 8.7 | 0.0069 | 2026-07-14 | Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quot | |
CVE-2026-46640 |
high | 8.7 | 0.0064 | 2026-07-14 | Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) and import-alias dyn | |
CVE-2026-58655 |
high | 8.7 | 0.0142 | 2026-07-15 | The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stor | |
CVE-2026-59859 |
high | 8.7 | 0.0138 | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.4, Kiota's PHP genera | |
CVE-2026-59860 |
high | 8.7 | 0.0138 | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.3, Kiota is affected | |
CVE-2026-53597 |
high | 8.7 | 0.0097 | 2026-07-16 | Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, | |
CVE-2026-47722 |
high | 8.7 | 0.0047 | 2026-07-23 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to v | |
CVE-2026-56747 |
high | 8.7 | 0.0067 | 2026-07-27 | Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream befo | |
CVE-2026-66748 |
high | 8.7 | 0.0114 | 2026-07-28 | Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerabil | |
CVE-2026-69100 |
high | 8.7 | 0.0102 | 2026-08-04 | LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execu | |
CVE-2026-17603 |
high | 8.7 | 0.0087 | 2026-08-07 | Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be | |
CVE-2026-72765 |
high | 8.7 | 0.0086 | 2026-08-11 | n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. | |
CVE-2026-85610 |
high | 8.7 | 0.0071 | 2026-09-04 | OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated | |
CVE-2026-112770 |
high | 8.7 | 0.0071 | 2026-10-19 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in | |
CVE-2026-115935 |
high | 8.7 | 0.0037 | 2026-10-23 | The app/process-api-response-headers action accepts fake Craft API response headers from any authent | |
CVE-2026-119028 |
high | 8.7 | — | 2026-10-29 | oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inj | |
CVE-2026-114125 |
high | 8.6 | 0.0039 | 2026-10-21 | Storybook is a frontend workshop for building user interface components and pages in isolation. From | |
CVE-2025-30045 |
high | 8.6 | 0.0020 | 2026-10-23 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressi | |
CVE-2026-118683 |
high | 8.6 | 0.0049 | 2026-10-28 | MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__ini | |
CVE-2026-33955 |
high | 8.6 | 0.0035 | 2026-03-27 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scripting vulne | |
CVE-2026-22666 |
high | 8.6 | 0.1553 | 2026-04-07 | Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerabili |