CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104317 | CRITICAL | 9.8 | 0.6% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitr... |
| CVE-2026-104316 | MEDIUM | 6.5 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo... |
| CVE-2026-104315 | MEDIUM | 4.3 | 0.2% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat... |
| CVE-2026-104314 | MEDIUM | 6.5 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow ... |
| CVE-2026-104312 | MEDIUM | 6.8 | 0.2% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co... |
| CVE-2026-104310 | MEDIUM | 4.3 | 0.3% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-104309 | MEDIUM | 6.5 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-104308 | MEDIUM | 4.3 | 0.3% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to im... |
| CVE-2026-103092 | HIGH | 8.8 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due ... |
| CVE-2026-102590 | HIGH | 7.7 | 0.3% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to... |
| CVE-2026-101288 | HIGH | 8.8 | 0.7% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro... |
| CVE-2025-13050 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user |
| CVE-2026-97073 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2026-80069 | MEDIUM | 5.4 | 0.4% | Oct 29, 2026 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authen... |
| CVE-2026-80067 | MEDIUM | 5.4 | — | Oct 29, 2026 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Sub... |
| CVE-2026-54871 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder all... |
| CVE-2026-54853 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configur... |
| CVE-2026-54852 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Explo... |
| CVE-2026-52708 | MEDIUM | 4.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured... |
| CVE-2026-48884 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured... |
| CVE-2026-42691 | MEDIUM | 5.4 | 0.2% | Oct 29, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-manage... |
| CVE-2026-39742 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell... |
| CVE-2026-39737 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2026-27063 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured... |
| CVE-2026-27062 | MEDIUM | 4.3 | 0.1% | Oct 29, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery.... |