CVE-2026-107366

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

CVE-2026-107366 Langflow OSS Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

CVE-2026-107366 Langflow OSS Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

CVE-2026-107366

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to an authorization bypass (CWE-639) because three message endpoints fail to perform ownership verification. This flaw allows any authenticated user to perform unauthorized actions, including bulk-deleting another user's messages, over...

CVE-2026-98525

A flaw was found in the Linux kernel's Management Component Transport Protocol MCTP subsystem. When looking up preallocated communication tags, the kernel fails to verify that a requested tag belongs to the calling socket and instead searches across the entire network namespace. A local attacker...

DoS (Denial of Service) org.apache.httpcomponents.core5:httpcore5 Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

CVE-2026-14511

IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

CVE-2026-12343

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations...

CVE-2026-14511 IBM MQ Denial of Service

IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

EUVD-2026-104477

IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

CVE-2026-14511

IBM MQ versions 9.4.5.0 through 9.4.5.1 CD are vulnerable to a denial of service (DoS) issue. An authenticated user can trigger a crash in consuming applications by sending a specially crafted message. The root cause is identified as CWE-770: Allocation of Resources Without Limits or Throttling ....

CVE-2026-14511 IBM MQ Denial of Service

IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

CVE-2026-11828 IBM MQ Buffer Overflow

IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...

CVE-2026-11828

IBM MQ is vulnerable to a buffer overflow caused by improper validation of queue name length values. A remote attacker with queue manager control or man-in-the-middle access on unencrypted channels can exploit this to cause a denial of service in client applications utilizing asynchronous message...

CVE-2026-11828 IBM MQ Buffer Overflow

IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...

EUVD-2026-104468

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations...

CVE-2026-12343

IBM MQ is vulnerable to a Denial of Service condition. An authenticated attacker can exploit the improper validation of RFH2 message header fields during queued publish/subscribe operations. This flaw results in uncontrolled resource consumption (CWE-400), leading to a high availability impact. N...

CVE-2026-12343 IBM MQ Denial of Service

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations...

CVE-2026-12343 IBM MQ Denial of Service

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations...

Oracle Email Center security vulnerabilities

Oracle Email Center versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Message Component component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorizatio...