CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96187 | HIGH | 7.4 | 0.5% | Oct 29, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-93680 | CRITICAL | 9.8 | 2.3% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper auth... |
| CVE-2026-93571 | LOW | 2.3 | 0.2% | Oct 29, 2026 | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req... |
| CVE-2026-93570 | HIGH | 8.2 | 0.3% | Oct 29, 2026 | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf... |
| CVE-2026-90991 | MEDIUM | 6.5 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al... |
| CVE-2026-90872 | MEDIUM | 6.6 | 0.3% | Oct 29, 2026 | Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F... |
| CVE-2026-90871 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.... |
| CVE-2026-90870 | MEDIUM | 5.3 | 0.3% | Oct 29, 2026 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi... |
| CVE-2026-90869 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S... |
| CVE-2026-90868 | CRITICAL | 9.9 | 1.5% | Oct 29, 2026 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind... |
| CVE-2026-90867 | HIGH | 8.1 | 0.4% | Oct 29, 2026 | Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.... |
| CVE-2026-90866 | CRITICAL | 9.1 | 0.7% | Oct 29, 2026 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou... |
| CVE-2026-90865 | CRITICAL | 9 | 1.1% | Oct 29, 2026 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind... |
| CVE-2026-90864 | CRITICAL | 9.1 | 0.5% | Oct 29, 2026 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou... |
| CVE-2026-90863 | CRITICAL | 9.1 | 0.7% | Oct 29, 2026 | Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and ... |
| CVE-2026-90862 | MEDIUM | 4.3 | 0.2% | Oct 29, 2026 | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202... |
| CVE-2026-90861 | MEDIUM | 6.6 | 0.3% | Oct 29, 2026 | Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear... |
| CVE-2026-88090 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-88078 | MEDIUM | 4.3 | 0.3% | Oct 29, 2026 | Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to p... |
| CVE-2026-88077 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges ... |
| CVE-2026-85899 | HIGH | 8.1 | 0.6% | Oct 29, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-85897 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net... |
| CVE-2026-85890 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85330 | MEDIUM | 4.3 | 0.4% | Oct 29, 2026 | Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over ... |
| CVE-2026-84296 | MEDIUM | 6.8 | 0.3% | Oct 29, 2026 | Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2... |