Export limit exceeded: 393930 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (393930 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-0171 | 1 Google | 1 Android | 2026-09-16 | 8.8 High |
| In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-55365 | 1 Google | 1 Android | 2026-09-16 | 6.7 Medium |
| In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-56882 | 1 Google | 1 Android | 2026-09-16 | 8.8 High |
| In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-56950 | 1 Google | 1 Android | 2026-09-16 | 4.4 Medium |
| In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58751 | 1 Google | 1 Android | 2026-09-16 | 6.7 Medium |
| In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-83066 | 1 Oracle | 1 Internet Directory | 2026-09-16 | 9.8 Critical |
| Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-81941 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.8 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess transport. This bypasses both the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY and LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS server-side controls intended to prevent exactly this class of access. Successful exploitation could lead to arbitrary command execution, sensitive data exposure (including credentials from the process environment), file system modification, and lateral movement to services reachable from the server. | ||||
| CVE-2026-81940 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.8 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names. | ||||
| CVE-2026-81268 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.1 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation. | ||||
| CVE-2026-81265 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 7.5 High |
| IBM Langflow OSS 1.0.0 through 1.11.5. | ||||
| CVE-2026-81213 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.6 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs. | ||||
| CVE-2026-81211 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.8 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows. | ||||
| CVE-2026-81204 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 9.8 Critical |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction. | ||||
| CVE-2026-79742 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.8 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist. | ||||
| CVE-2026-79725 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 6.5 Medium |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control. | ||||
| CVE-2026-79724 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 9.8 Critical |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command. | ||||
| CVE-2026-79723 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 5 Medium |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints. | ||||
| CVE-2026-78575 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.8 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration. | ||||
| CVE-2026-78573 | 1 Ibm | 3 Contextforge, Contextforge-mcp-gateway, Contextforge Mcp Gateway | 2026-09-16 | 9.8 Critical |
| IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials. | ||||
| CVE-2026-78571 | 2 Ibm, Langflow | 2 Langflow Oss, Langflow | 2026-09-16 | 8.8 High |
| IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input. | ||||