CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
204905 CVEs matched. Showing 101–150 (page 3 of 4099).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-47612 |
CVE-2026-47612 | HIGH | 7.5 | — | — | nvidia | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-24255 |
CVE-2026-24255 | HIGH | 7.5 | — | — | nvidia | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-24254 |
CVE-2026-24254 | CRITICAL | 9.8 | — | — | nvidia | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69264 |
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation | CRITICAL | 9.4 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-24253 |
CVE-2026-24253 | HIGH | 8.2 | — | — | nvidia | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-47487 |
CVE-2026-47487 | MEDIUM | 4.4 | — | — | nvidia | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18788 |
Trippo ResponsiveFilemanager dialog.php unrestricted upload | MEDIUM | 6.9 | — | — | VulDB | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18787 |
GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection | HIGH | 8.7 | — | — | VulDB | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-15314 |
Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110 | HIGH | 7.1 | — | — | TPLink | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69263 |
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) | HIGH | 8.7 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69262 |
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:del… | HIGH | 7.1 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-48121 |
@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access | MEDIUM | 6.7 | — | — | GitHub_M | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18785 |
o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free | MEDIUM | 4.8 | — | — | VulDB | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-63456 |
Authentication bypass via spoofed HTTP headers Orchestrator REST API | CRITICAL | 9.8 | — | — | hpe | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-63455 |
Authentication bypass via spoofed HTTP headers Orchestrator REST API | CRITICAL | 9.8 | — | — | hpe | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-18784 |
o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow | MEDIUM | 4.8 | — | — | VulDB | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18775 |
NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery | MEDIUM | 5.3 | — | — | VulDB | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-69259 |
Flowise RCE via SQLite Record Manager Node | CRITICAL | 9.4 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-18774 |
NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery | MEDIUM | 5.3 | — | — | VulDB | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-56848 |
CVE-2026-56848 | HIGH | 7.5 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69258 |
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Predictio… | HIGH | 8.8 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58072 |
CVE-2026-58072 | CRITICAL | 9.0 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58074 |
CVE-2026-58074 | HIGH | 8.6 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-64630 |
CVE-2026-64630 | MEDIUM | 5.3 | — | — | hackerone | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-58073 |
CVE-2026-58073 | CRITICAL | 9.5 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-64631 |
CVE-2026-64631 | HIGH | 8.6 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58075 |
CVE-2026-58075 | HIGH | 8.7 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-64633 |
CVE-2026-64633 | CRITICAL | 10.0 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-64634 |
CVE-2026-64634 | HIGH | 8.4 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58071 |
CVE-2026-58071 | HIGH | 8.2 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-58067 |
CVE-2026-58067 | HIGH | 8.7 | — | — | hackerone | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69257 |
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses | HIGH | 7.6 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-15920 |
Potential cross-site scripting via URLField values in the admin | MEDIUM | 5.1 | — | — | DSF | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-15830 |
Potential denial-of-service vulnerability via nested geometry collections | MEDIUM | 6.9 | — | — | DSF | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-15337 |
Potential denial-of-service vulnerability in check_for_language() | MEDIUM | 6.9 | — | — | DSF | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-15307 |
Server-side file-write and request forgery via spatial lookups | HIGH | 8.7 | — | — | DSF | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69256 |
Flowise: Remote Code Execution Vulnerability in CSVAgent | CRITICAL | 9.4 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69255 |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified | CRITICAL | 9.2 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-10032 |
Arbitrary JavaScript Execution via openUrl in @a2ui/web_core | MEDIUM | 6.1 | — | — | 2026-08-04 | — | — | raw · ⬇ | |
CVE-2026-69110 |
OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music | CRITICAL | 9.3 | — | — | VulnCheck | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69254 |
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override | CRITICAL | 9.4 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69100 |
LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution | HIGH | 8.7 | — | — | VulnCheck | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69098 |
kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization | CRITICAL | 9.3 | — | — | VulnCheck | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-69253 |
Flowise Sandbox Escape to RCE | CRITICAL | 9.0 | — | — | GitHub_M | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-25292 |
Improper Validation of Syntactic Correctness of Input in Automotive Linux OS | HIGH | 7.6 | — | — | qualcomm | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-25289 |
Stack-based Buffer Overflow in WLAN Firmware | CRITICAL | 9.6 | — | — | qualcomm | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-25288 |
Buffer Over-read in WLAN Firmware | HIGH | 7.4 | — | — | qualcomm | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-24084 |
Insecure Security Identifier Mechanism in Multi-Mode Call Processor | HIGH | 7.5 | — | — | qualcomm | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-24083 |
Untrusted Pointer Dereference in Automotive Security | HIGH | 7.8 | — | — | qualcomm | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-24080 |
Buffer Copy Without Checking Size of Input in Biometrics | HIGH | 7.8 | — | — | qualcomm | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |