Lucene search
+L

209073 matches found

Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•7 views

PT-2026-107616

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote...

9.8CVSS8.3AI score0.00509EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•7 views

PT-2026-107598

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to improper input validation of special elements used in a command. This flaw is categorized under CWE-20, which refers to improper input validation, where the softwar...

8.6CVSS5.7AI score0.00278EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•9 views

PT-2026-107469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-106226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof...

4.2CVSS6AI score0.00225EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•14 views

PT-2026-107329

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper input validation allows a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a...

8.8CVSS6.7AI score0.00445EPSS
SaveExploits0References9
CVE
CVE
•added 2026/10/06 11:59 p.m.•30 views

CVE-2026-97678

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97678 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693). The vulnerability has a HIGH base severity score of 8.8 . To remediate this issue, IBM strongly recomm...

8.8CVSS6.7AI score0.00415EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/06 11:59 p.m.•49 views

CVE-2026-97678 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

8.8CVSS0.00415EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 11:59 p.m.•29 views

CVE-2026-97679

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97679 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command, which stems from improper input validation . Th...

8.8CVSS6.8AI score0.00449EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/06 11:59 p.m.•6 views

CVE-2026-97679 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...

8.8CVSS6.8AI score0.00449EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 11:59 p.m.•44 views

CVE-2026-97679 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...

8.8CVSS0.00449EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/06 11:29 p.m.•21 views

CVE-2024-21513

CVE-2024-21513 إثبات المفهوم لـ CVE-2024-21513 الاستغلال الأصلي موثّق من قبل Snyk Security Research الاستغلال CVE-2024-21513 هو ثغرة أمنية في langchain-experimental حيث يتم تمرير نتائج استعلامات SQL غير الموثّقة إلى دالة eval في بايثون، مما يتيح تنفيذ تعليمات برمجية عن بُعد عبر حقن المدخلات...

8.5CVSS6.2AI score0.01893EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/10/06 11:28 p.m.•6 views

CVE-2026-106331

An improper input validation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553256068...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/06 11:21 p.m.•14 views

CVE-2025-9816

CVE-2025-9816 XSS مخزّن على إضافة WP-Statistics الماسح الضوئي الكشف وإثبات المفهوم "إضافة WP Statistics – الإضافة التحليلية الأكثر شعبية والصديقة للخصوصية في WordPress – عرضة لثغرة Cross-Site Scripting المخزّنة عبر ترويسة User-Agent في جميع الإصدارات حتى 14.5.4 وما يشملها، وذلك بسبب عدم كفاية تعق...

7.2CVSS6.2AI score0.09682EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/06 11:19 p.m.•7 views

CVE-2026-43598

A flaw was found in the AMD ROCm Communication Collectives Library RCCL. Due to improper input validation, a network-adjacent attacker or a compromised peer node can supply a crafted memory address that the library accesses without proper verification. This vulnerability could allow an attacker t...

7.7CVSS6.3AI score0.00458EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 10:17 p.m.•8 views

CVE-2026-106506

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...

5.3CVSS0.00217EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/06 9:44 p.m.•5 views

CVE-2026-106506 Backstage: Improper input validation in scaffolder task list ordering

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...

5.3CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/06 9:44 p.m.•17 views

CVE-2026-106506

The Backstage framework is vulnerable to improper input validation within the @backstage/plugin-scaffolder-backend package in versions prior to 4.1.0 . This flaw exists in the scaffolder task list ordering functionality, potentially allowing an authenticated user with permissions to create and re...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/06 9:44 p.m.•5 views

CVE-2026-106506 Backstage: Improper input validation in scaffolder task list ordering

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/06 9:44 p.m.•49 views

CVE-2026-106506 Backstage: Improper input validation in scaffolder task list ordering

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...

5.3CVSS0.00217EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/06 9:44 p.m.•9 views

CVE-2026-106506

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...

6CVSS5.8AI score0.00217EPSS
SaveExploits0References5
Rows per page
Query Builder