Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 126–150 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-107044 | NONE | — | 2026-10-29 | Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism. | |
| CVE-2026-107043 | NONE | — | 2026-10-29 | Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism. | |
| CVE-2025-12523 | MEDIUM | 6.5 | 2026-10-29 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user | |
| CVE-2023-7357 | HIGH | Patched | — | 2026-10-29 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 202… |
| CVE-2026-96203 | HIGH | 8.8 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-96199 | HIGH | 8.8 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-96198 | HIGH | 8.8 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-96196 | HIGH | 8.8 | 2026-10-29 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |
| CVE-2026-96192 | HIGH | 8.8 | 2026-10-29 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-96187 | HIGH | 7.4 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-93680 | CRITICAL | Patched | 9.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication. |
| CVE-2026-93571 | LOW | Patched | — | 2026-10-29 | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file … |
| CVE-2026-93570 | HIGH | Patched | — | 2026-10-29 | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE` with an external… |
| CVE-2026-90991 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resources without limits or throttling. |
| CVE-2026-90872 | MEDIUM | 6.6 | 2026-10-29 | Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on… | |
| CVE-2026-90871 | MEDIUM | 5.3 | 2026-10-29 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthentic… | |
| CVE-2026-90870 | MEDIUM | 5.3 | 2026-10-29 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could … | |
| CVE-2026-90869 | HIGH | 7.5 | 2026-10-29 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Server versions prior to 2024.0.7 and… | |
| CVE-2026-90868 | CRITICAL | 9.9 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under ce… | |
| CVE-2026-90867 | HIGH | 8.1 | 2026-10-29 | Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functiona… | |
| CVE-2026-90866 | CRITICAL | 9.1 | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access lo… | |
| CVE-2026-90865 | CRITICAL | 9.0 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with ele… | |
| CVE-2026-90864 | CRITICAL | 9.1 | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or… | |
| CVE-2026-90863 | CRITICAL | 9.1 | 2026-10-29 | Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Adm… | |
| CVE-2026-90862 | MEDIUM | 4.3 | 2026-10-29 | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user… |