149364 matches found
CVE-2026-93674
Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a critical remote code execution (RCE) flaw (CVE-2026-93674 ). The root cause is the improper neutralization of special elements used in an OS command (CWE-94), which allows a remote attacker to execute arbitrary code. This vulnerabilit...
EUVD-2026-94121
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
CVE-2026-97673 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
CVE-2026-97673 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
CVE-2026-106233
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libsoup vulnerabilities (USN-8890-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8890-1 advisory. It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker...
Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : FluidSynth vulnerabilities (USN-8885-1)
The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8885-1 advisory. It was discovered that FluidSynth did not properly validate the channel argument of the...
Linux Distros Unpatched Vulnerability : CVE-2026-106190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:4533-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4533-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header...
CVE-2026-106347
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe...
Linux Distros Unpatched Vulnerability : CVE-2026-106211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : U-Boot vulnerabilities (USN-8884-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system...
Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Tesseract vulnerabilities (USN-8882-1)
The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8882-1 advisory. It was discovered that Tesseract incorrectly handled crafted .traineddata models. An attacker...
CVE-2026-97678
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97678 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693). The vulnerability has a HIGH base severity score of 8.8 . To remediate this issue, IBM strongly recomm...
CVE-2026-97678 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
CVE-2026-97679
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97679 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command, which stems from improper input validation . Th...
CVE-2026-97679 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...
CVE-2026-97676
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a code injection flaw (CWE-94 ). A remote authenticated attacker can exploit the improper neutralization of special elements used in code to achieve a sandbox escape and execute arbitrary code. The severity is rated as High with a C...
CVE-2026-104334
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a critical vulnerability (CVE-2026-104334 ) that allows a remote attacker to execute arbitrary code. This is caused by improper control of code generation (CWE-94). The vulnerability has a CVSS base score of 9.8 , indicating a high im...