Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 545 (capped at 500)
| CVE ID ↑ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25781 | HIGH | 7.5 | 2026-10-29 | Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched bra… | |
| CVE-2023-22793 | CRITICAL | — | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Manageme… | |
| CVE-2023-7357 | HIGH | Patched | — | 2026-10-29 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 202… |
| CVE-2024-3586 | LOW | Patched | 3.5 | 2026-10-29 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cro… |
| CVE-2025-12523 | MEDIUM | 6.5 | 2026-10-29 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user | |
| CVE-2025-13050 | MEDIUM | 5.4 | 2026-10-29 | Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user | |
| CVE-2025-62839 | HIGH | — | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allo… | |
| CVE-2025-62841 | HIGH | — | 2026-10-29 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allo… | |
| CVE-2026-101288 | HIGH | Patched | 8.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code. |
| CVE-2026-102260 | MEDIUM | Patched | 4.3 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API endpoints that may allow an authenticated user with r… |
| CVE-2026-102590 | MEDIUM | Patched | 5.0 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability. |
| CVE-2026-103092 | HIGH | Patched | 8.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control. |
| CVE-2026-103093 | CRITICAL | Patched | — | 2026-10-29 | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the … |
| CVE-2026-103094 | HIGH | Patched | — | 2026-10-29 | ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext passw… |
| CVE-2026-103485 | MEDIUM | 5.4 | 2026-10-29 | The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties[<template-token>]' parameter in all v… | |
| CVE-2026-103665 | HIGH | 7.8 | 2026-10-29 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a direc… | |
| CVE-2026-103693 | CRITICAL | Patched | 9.0 | 2026-10-29 | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP obje… |
| CVE-2026-103875 | MEDIUM | 4.7 | 2026-10-29 | The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search-string' parameter in all versions up to, and including, 3.4… | |
| CVE-2026-104308 | MEDIUM | Patched | 4.3 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an… |
| CVE-2026-104309 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted d… |
| CVE-2026-104310 | MEDIUM | Patched | 4.3 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability. |
| CVE-2026-104312 | LOW | Patched | 3.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the inten… |
| CVE-2026-104314 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party cred… |
| CVE-2026-104315 | MEDIUM | Patched | 4.3 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the s… |
| CVE-2026-104316 | MEDIUM | Patched | 6.5 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulti… |