|
cve-2026-55450
|
Langflow Langflow Exposure of Sensitive Information to an Unauthorized Actor |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-09 |
|
cve-2026-65400
|
An authentication issue was addressed with improved state management |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-2652
|
lfprojects MLflow Authentication Bypass by Primary Weakness |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-07 |
|
cve-2013-3821
|
PeopleSoft Enterprise PeopleTools Component Unspecified Vulnerability |
HIGH
|
N/A
|
6.90%
|
cvelistv5 |
2026-08-07 |
|
cve-2026-72898
|
Metabase SQL Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-06 |
|
cve-2026-15459
|
Improper Authentication |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-06 |
|
cve-2018-14013
|
Synacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-06 |
|
cve-2026-66665
|
Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions. |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-63077
|
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pol... |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-16144
|
kaliforms contact_form_builder Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-05 |
|
cve-2026-9198
|
IBM Langflow Code Injection Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-04 |
|
cve-2026-28409
|
wegia wegia Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-04 |
|
cve-2026-28139
|
Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-23 |
|
cve-2026-65442
|
Server-Side Request Forgery |
HIGH
|
7.2
|
N/A
|
cvelistv5 |
2026-08-03 |
|
cve-2026-54066
|
SUSE CVE CVE-2026-54066 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-07-30 |
|
cve-2026-46300
|
Linux Kernel Missing Initialization of a Variable Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-10-28 |
|
cve-2026-38992
|
agentejo cockpit Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-03 |
|
cve-2026-18577
|
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions th... |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-10-23 |
|
cve-2025-71324
|
FlowiseAI Flowise External Control of File Name or Path |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-08-02 |
|
cve-2023-54359
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-08-02 |
|
cve-2023-2825
|
GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-08-02 |
|
cve-2026-73533
|
wpmanageninja ninja_tables Embedded Malicious Code |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-01 |
|
cve-2026-73532
|
Embedded Malicious Code |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-01 |
|
cve-2026-53576
|
Kestra kestra Improper Control of Generation of Code |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-08-01 |
|
cve-2026-48313
|
Adobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-01 |
|
cve-2026-18556
|
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypa... |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-10-23 |
|
cve-2024-37014
|
Langflow '/api/v1/custom_component' Remote Code Execution |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-01 |
|
cve-2026-3836
|
Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-07-31 |
|
cve-2026-102895
|
cve-2026-102895 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
unknown |
|
cve-2026-40217
|
LiteLLM LiteLLM Unprotected Alternate Channel |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-07-30 |
ndaal KEV