13230 matches found
CVE-2026-81940
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940
CVE-2026-81940 affects IBM Langflow OSS versions 1.0.0 through 1.11.5 , where improper neutralization of special characters in flow display names permits a remote authenticated attacker to execute arbitrary code. The underlying cause is classified as CWE-94 (Code Injection) : attacker-controlled ...
CVE-2026-81940 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
PT-2026-89636
🚨 CVE-2026-81940 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names. 🎖@cveNotify...
CVE-2026-81940: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-79617 Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15...
CVE-2026-79617
CVE-2026-79617 is an improper access control vulnerability (Incorrect Permission Assignment for Critical Resource) in TÜBİTAK BİLGEM's Pardus LightDM Greeter , affecting versions before 0.4.15 . The flaw allows an attacker with local access and low privileges to exploit incorrectly configured acc...
CVE-2026-79617 Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15...
ROS-20260909-73-0122
The vulnerability of the PDFium component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created PDF file...
The vulnerability of the linedisp_display() function in the drivers/auxdisplay/line-display.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the linedispdisplay function in the drivers/auxdisplay/line-display.c module of the Linux kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-70567
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70567
CVE-2026-70567 is a double free vulnerability in the Windows Display Enhancement Service that allows a low-privileged, authorized local attacker to achieve privilege escalation . The attack vector is local with high complexity and requires no user interaction. The CVSS 3.1 score is 7.0 (HIGH) wit...
EUVD-2026-73647
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
Windows Display Enhancement Service Elevation of Privilege Vulnerability
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70567: Double Free
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
ROS-20260908-73-0048
The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...
ROS-20260908-73-0049
The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...