Export limit exceeded: 386960 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 386960 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 386960 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 386960 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (386960 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-17274 | 1 Ibm | 1 I | 2026-09-04 | 5.4 Medium |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds. | ||||
| CVE-2026-17442 | 1 Ibm | 2 App Connect Enterprise, Integration Bus For Zos | 2026-09-04 | 5.1 Medium |
| IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext. | ||||
| CVE-2026-56855 | 1 Golang | 1 Crypto | 2026-09-04 | 7.5 High |
| Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking. | ||||
| CVE-2026-78662 | 1 Golang | 1 Crypto | 2026-09-04 | 7.5 High |
| Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection. | ||||
| CVE-2026-17444 | 1 Ibm | 2 App Connect Enterprise, Integration Bus For Zos | 2026-09-04 | 5.3 Medium |
| IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection. | ||||
| CVE-2026-17469 | 1 Ibm | 1 I | 2026-09-04 | 5.3 Medium |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser. | ||||
| CVE-2026-17483 | 1 Ibm | 1 Db2 Mirror For I | 2026-09-04 | 4.3 Medium |
| IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure. | ||||
| CVE-2026-75161 | 2026-09-04 | N/A | ||
| An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to inject arbitrary code into the dpcheck system utility executed as root. | ||||
| CVE-2026-17621 | 1 Ibm | 1 Langflow Oss | 2026-09-04 | 5.4 Medium |
| IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system. | ||||
| CVE-2026-17622 | 1 Ibm | 1 Langflow Oss | 2026-09-04 | 6.5 Medium |
| IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | ||||
| CVE-2026-17631 | 1 Ibm | 1 Langflow Oss | 2026-09-04 | 5 Medium |
| IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability. | ||||
| CVE-2026-18076 | 1 Ibm | 1 I | 2026-09-04 | 4.3 Medium |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak. | ||||
| CVE-2026-84292 | 2 Fast-uri, Openjsf | 2 Fast-uri, Fast-uri | 2026-09-04 | 7.5 High |
| fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host to userinfo and pointing the authority at an attacker-controlled host. Both fast-uri and Node's URL read the result back as the attacker's host with no error, so re-validating the built URI does not catch it. This affects applications that build URIs from parts and assign untrusted data to the port component through the serialize, normalize, or equal functions in their object forms. The issue affects fast-uri versions before 2.4.6, from 3.0.0 before 3.1.7, and from 4.0.0 before 4.1.4. It is fixed in 2.4.6, 3.1.7, and 4.1.4, where recomposeAuthority rejects any port that is not a digit sequence per RFC 3986. | ||||
| CVE-2026-18175 | 1 Ibm | 1 I | 2026-09-04 | 8.1 High |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher. | ||||
| CVE-2026-18221 | 1 Ibm | 1 I | 2026-09-04 | 8.1 High |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters. | ||||
| CVE-2026-18486 | 1 Ibm | 1 Contextforge-mcp-gateway | 2026-09-04 | 8.8 High |
| IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters. | ||||
| CVE-2026-85690 | 1 Plandex-ai | 1 Plandex | 2026-09-04 | 7.8 High |
| Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the project directory. Attackers can influence model output through poisoned repository files or attacker-controlled context to write to arbitrary locations like shell rc or cron files, achieving code execution. | ||||
| CVE-2026-85685 | 2026-09-04 | 7.5 High | ||
| AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skill_path request parameter to copy files into the skills directory, making them accessible through the workspace skill listing. | ||||
| CVE-2026-85673 | 1 Hiyouga | 1 Llama-factory | 2026-09-04 | 7.5 High |
| LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url guard validates URLs once but requests.get follows redirects and re-resolves DNS without re-validation, enabling attackers to use HTTP redirects or DNS rebinding to access internal addresses and cloud metadata endpoints. | ||||
| CVE-2026-85668 | 1 Xorbitsai | 1 Inference | 2026-09-04 | 7.5 High |
| Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied model_path parameter without authentication or path confinement. The endpoint reads and parses config.json, tokenizer_config.json, and chat_template.jinja files at the supplied path and reflects the parsed content back to the caller, allowing an unauthenticated attacker to probe the server filesystem and extract content of files with those names in any directory. | ||||