Lucene search
+L

84119 matches found

NVD
NVD
added 2026/07/17 8:17 p.m.8 views

CVE-2026-8635

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions...

9.9CVSS0.00301EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 8:17 p.m.7 views

CVE-2026-7771

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service...

5.5CVSS0.00103EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 8:17 p.m.19 views

CVE-2026-63030

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...

9.8CVSS0.98417EPSS
SaveExploits68References3
EUVD
EUVD
added 2026/07/17 7:55 p.m.12 views

EUVD-2026-45305

IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions...

4.3CVSS5.9AI score0.00242EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/17 7:42 p.m.7 views

GO-2026-5991 nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh

nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh...

5.2AI score
SaveExploits0References3
OSV
OSV
added 2026/07/17 7:42 p.m.9 views

GO-2026-5979 Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode in github.com/julien040/anyquery

Anyquery: Arbitrary File Write AFW which could lead to Remote Code Execution RCE via Unrestricted ATTACH DATABASE in Server Mode in github.com/julien040/anyquery...

5.5AI score0.00416EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/17 7:16 p.m.6 views

CVE-2026-7771 IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service...

5.5CVSS5.2AI score0.00103EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 7:16 p.m.31 views

CVE-2026-7771

Summary (CVE-2026-7771): IBM Db2 is vulnerable to a trap when compiling specially crafted statements containing subqueries, potentially causing a denial of service. Affected are Db2 11.5.0–11.5.9 and 12.1.0–12.1.4 (both Client and Server). Root cause identified as CWE-835 (Loop with Unreachable E...

5.5CVSS5.2AI score0.00103EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/17 7:16 p.m.10 views

EUVD-2026-45283

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service...

5.5CVSS5.2AI score0.00103EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 7:2 p.m.28 views

CVE-2026-8635

Security bulletin confirms CVE-2026-8635 affects Langflow OSS versions 1.0.0–1.10.0 where an authenticated user can exploit the Python Interpreter component to execute arbitrary code, bypass controls, and escalate to superuser by manipulating the database, potentially compromising the Langflow se...

9.9CVSS5.7AI score0.00301EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/17 7:2 p.m.8 views

EUVD-2026-45270

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions...

9.9CVSS5.7AI score0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/17 7:2 p.m.42 views

CVE-2026-8635 Arbitrary Code Execution in Python Interpreter Component

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions...

9.9CVSS0.00301EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:50 p.m.8 views

CVE-2026-45162

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, multiple Pimcore locations call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, including lib/Tool/Authentication.php, models/Site/Dao.php...

8CVSS6.3AI score0.00574EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2026/07/17 6:23 p.m.29 views

WordPress Core <= 7.0.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by TF1T, dtro, and haongo in WordPress core versions = 7.0.1...

9.1CVSS5.9AI score0.79029EPSS
SaveExploits51References2Affected Software1
NVD
NVD
added 2026/07/17 6:17 p.m.8 views

CVE-2026-9762

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

7.8CVSS0.00165EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/17 5:25 p.m.10 views

EUVD-2026-45234

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

7.8CVSS6.3AI score0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/17 5:25 p.m.13 views

CVE-2026-9762 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

7.8CVSS6.3AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 5:17 p.m.13 views

CVE-2026-9586

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...

9.3CVSS0.00411EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 5:17 p.m.7 views

CVE-2026-63307

Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/id endpoint. The handler calls dataSourceService.queryExistentid, ... without an ownership check and returns the decrypted password field, allowing any authenticated non-admin use...

7.1CVSS0.00231EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/17 5:17 p.m.9 views

CVE-2026-49209

Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Controller\BatchActionController::invoke iterates over the client-supplied actions array and issues a full HttpKernel sub-request for each entry; because the array size is never bounded, ...

6.5CVSS0.00312EPSS
SaveExploits0References4
Rows per page
Query Builder