by Kastro CVE-2026-33309 · langflow-ai langflow
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,960 matching vulnerabilities · Page 199 of 780
ParisNeo
mitre
CVE-2026-26830 · mitre
pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter.
CVE-2026-26831 · mitre
textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.
CVE-2026-26833 · mitre
thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because use…
CVE-2026-26832 · mitre
node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.
CVE-2025-59706 · mitre
In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.
CVE-2025-59707 · mitre
In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing…
CVE-2025-70888 · mitre
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c com…
CVE-2025-32991 · mitre
In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.
pyload
code-projects
CVE-2026-4784 · code-projects Simple Laundry System
code-projects Simple Laundry System Parameter checkcheckout.php sql injection
ellite
withastro
Mozilla
CVE-2026-4696 · Mozilla Firefox
Use-after-free in the Layout: Text and Fonts component
CVE-2026-4700 · Mozilla Firefox
Mitigation bypass in the Networking: HTTP component
CVE-2026-4689 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
CVE-2026-4698 · Mozilla Firefox
JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-4690 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
CVE-2026-4702 · Mozilla Firefox
JIT miscompilation in the JavaScript Engine component
CVE-2026-4705 · Mozilla Firefox
Undefined behavior in the WebRTC: Signaling component
CVE-2026-4692 · Mozilla Firefox
Sandbox escape in the Responsive Design Mode component
CVE-2026-4723 · Mozilla Firefox
Use-after-free in the JavaScript Engine component
CVE-2026-4691 · Mozilla Firefox
Use-after-free in the CSS Parsing and Computation component
CVE-2026-4701 · Mozilla Firefox
Use-after-free in the JavaScript Engine component
CVE-2026-4710 · Mozilla Firefox
Incorrect boundary conditions in the Audio/Video component
CVE-2026-4711 · Mozilla Firefox
Use-after-free in the Widget: Cocoa component
CVE-2026-4717 · Mozilla Firefox
Privilege escalation in the Netmonitor component
CVE-2026-4720 · Mozilla Firefox
Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
CVE-2026-4721 · Mozilla Firefox
Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
CVE-2026-4724 · Mozilla Firefox
Undefined behavior in the Audio/Video component
CVE-2026-4715 · Mozilla Firefox
Uninitialized memory in the Graphics: Canvas2D component
CVE-2026-4716 · Mozilla Firefox
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
CVE-2026-4725 · Mozilla Firefox
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
CVE-2026-4729 · Mozilla Firefox
Memory safety bugs fixed in Firefox 149 and Thunderbird 149
NVIDIA
CVE-2026-24157 · NVIDIA NeMo Framework
NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.
CVE-2026-24159 · NVIDIA NeMo Framework
NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution.
CVE-2025-33244 · NVIDIA Apex
NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data.
Apple
CVE-2026-28858 · Apple iOS and iPadOS
A buffer overflow was addressed with improved bounds checking.
CVE-2026-20688 · Apple iOS and iPadOS
A path handling issue was addressed with improved validation.
CVE-2026-28827 · Apple macOS
A parsing issue in the handling of directory paths was addressed with improved path validation.
AncoraThemes
axiomthemes
CVE-2026-22500 · axiomthemes m2 | Construction and Tools Store
WordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability
Pharos Controls
CVE-2026-2417 · Pharos Controls Mosaic Show Controller
Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller
minio
go-vikunja
parse-community
CVE-2026-33409 · parse-community parse-server