by Kastro CVE-2026-0770 · Langflow Langflow
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,974 matching vulnerabilities · Page 230 of 780
Langflow
SmarterTools
Sangfor
CVE-2026-1412 · Sangfor Operation and Maintenance Security Management System
Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection
CVE-2026-1414 · Sangfor Operation and Maintenance Security Management System
Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection
CVE-2026-1413 · Sangfor Operation and Maintenance Security Management System
Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection
Framelink
Unified Intents AB
CVE-2021-47891 · Unified Intents AB Unified Remote
Unified Remote 3.9.0.2463 - Remote Code Execution
mitre
CVE-2025-70457 · mitre
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component.
CVE-2022-25369 · mitre
An issue was discovered in Dynamicweb before 9.12.8.
CVE-2025-70983 · mitre
Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges.
CVE-2025-70982 · mitre
Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily impor…
CVE-2025-70985 · mitre
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their…
CVE-2025-66719 · mitre
An issue was discovered in Free5gc NRF 1.4.0.
CVE-2025-52024 · mitre
A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauth…
CVE-2025-52025 · mitre
An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28.
CVE-2025-67229 · mitre
An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-pat…
Gemini MCP Tool
CVE-2026-0755 · Gemini MCP Tool gemini-mcp-tool
gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability
Foundation Agents
CVE-2026-0761 · Foundation Agents MetaGPT
Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability
CVE-2026-0760 · Foundation Agents MetaGPT
Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability
github-kanban-mcp-server
CVE-2026-0756 · github-kanban-mcp-server github-kanban-mcp-server
github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability
Katana Network
CVE-2026-0759 · Katana Network Development Starter Kit
Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability
Ollama MCP Server
CVE-2025-15063 · Ollama MCP Server Ollama MCP Server
Ollama MCP Server execAsync Command Injection Remote Code Execution Vulnerability
ALGO
CVE-2026-0787 · ALGO 8180 IP Audio Alerter
ALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability
CVE-2026-0791 · ALGO 8180 IP Audio Alerter
ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-0792 · ALGO 8180 IP Audio Alerter
ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-0793 · ALGO 8180 IP Audio Alerter
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-0794 · ALGO 8180 IP Audio Alerter
ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability
GPT Academic
Upsonic
irisideatechsolutions
CVE-2025-13374 · irisideatechsolutions Kalrav AI Agent
Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
Microsoft
CVE-2026-24304 · Microsoft Azure Resource Manager
Azure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-21227 · Microsoft Azure Logic Apps
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-21264 · Microsoft Microsoft Account
Microsoft Account Spoofing Vulnerability
orval-labs
Salesforce
CVE-2026-22582 · Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement…
CVE-2026-22583 · Salesforce Marketing Cloud Engagement
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement…
CVE-2026-22586 · Salesforce Marketing Cloud Engagement
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Sub…
CVE-2026-22585 · Salesforce Marketing Cloud Engagement
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend,…
Birebirsoft Software and Technology Solutions
CVE-2025-4320 · Birebirsoft Software and Technology Solutions Sufirmam
Information Disclosure in Birebirsoft's Sufirmam
CVE-2025-4319 · Birebirsoft Software and Technology Solutions Sufirmam
Improper Access Control in Birebirsoft's Sufirmam
JNC
Imagination Technologies
CVE-2025-13952 · Imagination Technologies Graphics DDK
GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP
Linux
chattermate
CVE-2026-24399 · chattermate chattermate.chat