Export limit exceeded: 389946 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 389946 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 20847 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (389946 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-17621 5 Apple, Ibm, Langflow and 2 more 5 Macos, Langflow Oss, Langflow and 2 more 2026-09-09 5.4 Medium
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
CVE-2026-81948 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-17622 5 Apple, Ibm, Langflow and 2 more 5 Macos, Langflow Oss, Langflow and 2 more 2026-09-09 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-81950 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-17627 5 Apple, Ibm, Langflow and 2 more 5 Macos, Langflow Oss, Langflow and 2 more 2026-09-09 4.9 Medium
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authorization.
CVE-2026-81953 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-17631 5 Apple, Ibm, Langflow and 2 more 5 Macos, Langflow Oss, Langflow and 2 more 2026-09-09 5 Medium
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability.
CVE-2026-81954 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-28664 2026-09-09 7.8 High
In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-19649 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 6.2 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.
CVE-2026-78543 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 5.3 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-49921 2026-09-09 9.8 Critical
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49927 2026-09-09 7.8 High
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55273 2026-09-09 7.8 High
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-16180 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 5.7 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
CVE-2026-55285 2026-09-09 7.8 High
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55294 2026-09-09 7.8 High
In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58822 2026-09-09 9.8 Critical
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58823 2026-09-09 7.8 High
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58839 2026-09-09 7.8 High
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.