Export limit exceeded: 417396 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (417396 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-104309 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-104310 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 4.3 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability.
CVE-2026-104312 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 3.5 Low
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file write on the victim's host.
CVE-2026-104314 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
CVE-2026-104315 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 4.3 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-104316 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check.
CVE-2026-104317 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 8.1 High
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
CVE-2026-104328 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-104331 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 5.4 Medium
IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-104339 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-107326 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-107327 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 9.9 Critical
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.
CVE-2026-107328 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 9.9 Critical
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.
CVE-2026-107329 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 9.9 Critical
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-110186 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
CVE-2026-110190 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system.
CVE-2026-110192 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2026-110193 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.
CVE-2026-110196 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 8.8 High
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs.
CVE-2026-110200 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-10-30 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information.