Export limit exceeded: 416842 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (176 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-104324 1 Ibm 1 Langflow Oss 2026-10-29 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data.
CVE-2026-104331 1 Ibm 1 Langflow Oss 2026-10-29 5.4 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-104339 1 Ibm 1 Langflow Oss 2026-10-29 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-107326 1 Ibm 1 Langflow Oss 2026-10-29 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-107327 1 Ibm 1 Langflow Oss 2026-10-29 9.9 Critical
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.
CVE-2026-107329 1 Ibm 1 Langflow Oss 2026-10-29 9.9 Critical
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-110186 1 Ibm 1 Langflow Oss 2026-10-29 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-110192 1 Ibm 1 Langflow Oss 2026-10-29 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2026-110193 1 Ibm 1 Langflow Oss 2026-10-29 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.
CVE-2026-110196 1 Ibm 1 Langflow Oss 2026-10-29 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs.
CVE-2026-110200 1 Ibm 1 Langflow Oss 2026-10-29 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information.
CVE-2026-110245 1 Ibm 1 Langflow Oss 2026-10-29 7.5 High
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.
CVE-2026-110309 1 Ibm 1 Langflow Oss 2026-10-29 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.
CVE-2026-107366 1 Ibm 1 Langflow Oss 2026-10-20 8.3 High
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.
CVE-2026-104335 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-09 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control.
CVE-2026-93678 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-09 7.6 High
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization.
CVE-2026-93448 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-09 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-101329 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-08 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.
CVE-2026-93674 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-08 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-93443 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-08 7.5 High
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.