Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 301–325 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-107028 | CRITICAL | 9.1 | 2026-10-29 | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shoppin… | |
| CVE-2026-107027 | NONE | — | 2026-10-29 | Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and ove… | |
| CVE-2026-107026 | HIGH | 7.5 | 2026-10-29 | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content. | |
| CVE-2026-107025 | NONE | — | 2026-10-29 | Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's data. | |
| CVE-2026-106036 | MEDIUM | Patched | — | 2026-10-29 | Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server.… |
| CVE-2026-104339 | CRITICAL | Patched | 9.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. |
| CVE-2026-104331 | MEDIUM | Patched | 5.4 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the s… |
| CVE-2026-104328 | HIGH | Patched | 8.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS… |
| CVE-2026-104324 | HIGH | Patched | 8.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data. |
| CVE-2026-104317 | HIGH | Patched | 8.1 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of… |
| CVE-2026-104316 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulti… |
| CVE-2026-104315 | MEDIUM | Patched | 4.3 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the s… |
| CVE-2026-104314 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party cred… |
| CVE-2026-104312 | LOW | Patched | 3.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the inten… |
| CVE-2026-104310 | MEDIUM | Patched | 4.3 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability. |
| CVE-2026-104309 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted d… |
| CVE-2026-104308 | MEDIUM | Patched | 4.3 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an… |
| CVE-2026-103092 | HIGH | Patched | 8.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control. |
| CVE-2026-102590 | MEDIUM | Patched | 5.0 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability. |
| CVE-2026-101288 | HIGH | Patched | 8.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code. |
| CVE-2025-13050 | MEDIUM | 5.4 | 2026-10-29 | Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user | |
| CVE-2026-97073 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a thro… | |
| CVE-2026-80069 | MEDIUM | Patched | 4.3 | 2026-10-29 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the … |
| CVE-2026-80067 | MEDIUM | Patched | 5.4 | 2026-10-29 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML file… |
| CVE-2026-54871 | MEDIUM | 5.3 | 2026-10-29 | Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Exploiting Incorrectly Configured Access Control… |