CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115793 | HIGH | 8.7 | 0.4% | Oct 29, 2026 | P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or obje... |
| CVE-2026-114148 | HIGH | 7.8 | — | Oct 29, 2026 | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. |
| CVE-2026-113576 | MEDIUM | 6.3 | — | Oct 29, 2026 | Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') ... |
| CVE-2026-112256 | CRITICAL | 9.2 | 0.2% | Oct 29, 2026 | Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allow... |
| CVE-2026-112255 | LOW | 2.9 | 0.5% | Oct 29, 2026 | Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Ex... |
| CVE-2026-112200 | HIGH | 8.7 | 0.4% | Oct 29, 2026 | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejecte... |
| CVE-2026-111736 | HIGH | 8.7 | 0.4% | Oct 29, 2026 | P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request withou... |
| CVE-2026-111735 | HIGH | 7.1 | 0.2% | Oct 29, 2026 | P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame whil... |
| CVE-2026-111734 | HIGH | 7.1 | 0.2% | Oct 29, 2026 | P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherTy... |
| CVE-2026-111733 | HIGH | 8.7 | 0.4% | Oct 29, 2026 | P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID ... |
| CVE-2026-111732 | CRITICAL | 9.3 | 0.4% | Oct 29, 2026 | P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVen... |
| CVE-2026-111731 | HIGH | 8.7 | 0.4% | Oct 29, 2026 | P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (w... |
| CVE-2026-111730 | HIGH | 7.2 | 0.2% | Oct 29, 2026 | P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The rece... |
| CVE-2026-110309 | HIGH | 8.8 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to i... |
| CVE-2026-110245 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper auth... |
| CVE-2026-110244 | MEDIUM | 6.5 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-110200 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-110196 | HIGH | 8.8 | 0.5% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypas... |
| CVE-2026-110193 | HIGH | 8.8 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause... |
| CVE-2026-110192 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-110190 | MEDIUM | 6.5 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attack... |
| CVE-2026-110186 | CRITICAL | 9.8 | 0.6% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of... |
| CVE-2026-109891 | MEDIUM | 6.4 | 0.1% | Oct 29, 2026 | Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorr... |
| CVE-2026-108494 | HIGH | 7.1 | — | Oct 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. |
| CVE-2026-107329 | HIGH | 8.8 | 0.8% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to impro... |