93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 3,751–3,800 of 93,331 · page 76 of 1867
| ID | Title | Summary |
|---|---|---|
| CVE-2026-91992 | CVE-2026-91992 CVSS 5.9 | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper state clear… |
| CVE-2026-91991 | CVE-2026-91991 CVSS 5.4 | Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitaliz… |
| CVE-2026-91990 | CVE-2026-91990 CVSS 7.5 | Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limi… |
| CVE-2026-9199 | CVE-2026-9199 CVSS 4.3 | The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to authorization bypass in all versio… |
| CVE-2026-91989 | CVE-2026-91989 CVSS 7.5 | atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by s… |
| CVE-2026-91988 | CVE-2026-91988 CVSS 8.1 | atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers t… |
| CVE-2026-91987 | CVE-2026-91987 CVSS 6.5 | atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown models not in the pri… |
| CVE-2026-91986 | CVE-2026-91986 CVSS 5.4 | gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafte… |
| CVE-2026-91985 | CVE-2026-91985 CVSS 7.5 | Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the sh… |
| CVE-2026-91984 | CVE-2026-91984 CVSS 4.3 | Vikunja before 2.6.0 fails to validate that user-supplied project_view_id in task-position requests belongs to the task's project. Authenticated attackers can … |
| CVE-2026-91983 | CVE-2026-91983 CVSS 4.3 | Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Atta… |
| CVE-2026-91982 | CVE-2026-91982 CVSS 4.3 | Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settings/totp and /api/v1/user/settings/totp/… |
| CVE-2026-91981 | CVE-2026-91981 CVSS 4.3 | Vikunja versions before 2.6.0 fail to properly validate link-share tokens in the v2 API user search endpoints. Attackers with a read-only share link can enumer… |
| CVE-2026-91980 | CVE-2026-91980 CVSS 4.3 | vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerate all teams and members. Attackers… |
| CVE-2026-9198 | IBM Langflow Code Injection Vulnerability KEVCVSS 9.8IBM | Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. |
| CVE-2026-91979 | CVE-2026-91979 CVSS 6.5 | Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly … |
| CVE-2026-91973 | CVE-2026-91973 CVSS 7.5 | Vikunja before 2.6.0 contains an authentication bypass vulnerability in CalDAV BasicAuth endpoints that lack rate limiting protection. Remote unauthenticated a… |
| CVE-2026-91972 | CVE-2026-91972 CVSS 7.5 | Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 public authentication endpoints including login, register, password-reset, and OAuth token… |
| CVE-2026-91971 | CVE-2026-91971 CVSS 6.5 | Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted image… |
| CVE-2026-91970 | CVE-2026-91970 CVSS 6.5 | Vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the Planka migrator that fails to enforce aggregate memory budgets during migratio… |
| CVE-2026-9197 | CVE-2026-9197 CVSS 4.9 | The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. … |
| CVE-2026-91969 | CVE-2026-91969 CVSS 6.5 | vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the POST /api/v2/migration/csv/migrate endpoint that fails to limit parsed row car… |
| CVE-2026-91968 | CVE-2026-91968 CVSS 6.5 | vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts deeply nested filter expressions without rec… |
| CVE-2026-91967 | CVE-2026-91967 CVSS 5.0 | AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues get_headers() calls guar… |
| CVE-2026-91966 | CVE-2026-91966 CVSS 5.8 | AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the check_site_availability function that accepts attacker-control… |
| CVE-2026-91965 | CVE-2026-91965 CVSS 7.5 | WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints. Unauthenticate… |
| CVE-2026-91964 | CVE-2026-91964 CVSS 8.8 | FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attac… |
| CVE-2026-91963 | CVE-2026-91963 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can … |
| CVE-2026-91962 | CVE-2026-91962 CVSS 6.3freerdp | FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers c… |
| CVE-2026-91961 | CVE-2026-91961 CVSS 6.5freerdp | FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before for… |
| CVE-2026-91960 | CVE-2026-91960 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of s… |
| CVE-2026-9196 | CVE-2026-9196 CVSS 8.1langflow | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper hand… |
| CVE-2026-91959 | CVE-2026-91959 CVSS 6.5freerdp | FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a m… |
| CVE-2026-91958 | CVE-2026-91958 CVSS 6.6freerdp | FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xf_detect_monit… |
| CVE-2026-91957 | CVE-2026-91957 CVSS 3.1freerdp | FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worker thread creation fails after device registration… |
| CVE-2026-91956 | CVE-2026-91956 CVSS 6.5freerdp | FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position … |
| CVE-2026-91955 | CVE-2026-91955 CVSS 7.5freerdp | FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negotiation, allowing remote attackers to crash the se… |
| CVE-2026-91954 | CVE-2026-91954 CVSS 6.5freerdp | FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A mali… |
| CVE-2026-91953 | CVE-2026-91953 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO … |
| CVE-2026-91952 | CVE-2026-91952 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function when decoding AVC444 metablocks with more region rec… |
| CVE-2026-91951 | CVE-2026-91951 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urb_send_current_frame_number_result() function. A m… |
| CVE-2026-91950 | CVE-2026-91950 CVSS 6.5freerdp | FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds… |
| CVE-2026-9195 | CVE-2026-9195 CVSS 9.3progress | A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authentic… |
| CVE-2026-91949 | CVE-2026-91949 CVSS 9.3freerdp | FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections… |
| CVE-2026-91948 | CVE-2026-91948 CVSS 7.5 | FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNEL_OPTION_SHOW_PROTOCOL is… |
| CVE-2026-91947 | CVE-2026-91947 CVSS 7.5 | FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the sync… |
| CVE-2026-91946 | CVE-2026-91946 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize pad… |
| CVE-2026-91945 | CVE-2026-91945 CVSS 6.5freerdp | FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed… |
| CVE-2026-91944 | CVE-2026-91944 CVSS 6.1 | crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns t… |
| CVE-2026-91943 | CVE-2026-91943 CVSS 7.7 | Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where _get_pdf_path() re-downloads targets with Python… |