CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107366 | HIGH | 8.3 | IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership ver… | — |
|
2026-10-20 |
| CVE-2026-105453 | HIGH | 8.4 | IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow… | — |
|
2026-10-20 |
| CVE-2026-53995 | HIGH | 8.2 | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend … | — |
|
2026-10-19 |
| CVE-2026-112360 | HIGH | 8.0 | A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the f… | — |
|
2026-10-19 |
| CVE-2026-112261 | HIGH | 7.8 | A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path… | — |
|
2026-10-19 |
| CVE-2026-112258 | HIGH | 7.8 | A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list wh… | — |
|
2026-10-19 |
| CVE-2026-112257 | HIGH | 7.8 | A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with … | — |
|
2026-10-19 |
| CVE-2026-76788 | HIGH | 8.8 | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes r… | — |
|
2026-10-19 |
| CVE-2026-112301 | HIGH | 7.3 | A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue … | — |
|
2026-10-19 |
| CVE-2026-82166 | HIGH | 8.8 | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical F… | — |
|
2026-10-19 |
| CVE-2026-71170 | HIGH | 7.8 | Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerabi… | — |
|
2026-10-19 |
| CVE-2026-71169 | HIGH | 7.0 | Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for … | — |
|
2026-10-19 |
| CVE-2026-112782 | HIGH | 7.5 | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability… | — |
|
2026-10-19 |
| CVE-2026-112780 | HIGH | 8.8 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to… | — |
|
2026-10-19 |
| CVE-2026-112777 | HIGH | 7.2 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() f… | — |
|
2026-10-19 |
| CVE-2026-112775 | HIGH | 7.5 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attac… | — |
|
2026-10-19 |
| CVE-2026-112774 | HIGH | 7.2 | Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authen… | — |
|
2026-10-19 |
| CVE-2026-112773 | HIGH | 8.8 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authen… | — |
|
2026-10-19 |
| CVE-2026-112772 | HIGH | 8.8 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authen… | — |
|
2026-10-19 |
| CVE-2026-112770 | HIGH | 8.8 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in … | — |
|
2026-10-19 |