All CVEs — page 340 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

CRITICAL 9.8CVE-2026-51915public exploit available2026-10-02
The flaw allows a remote authenticated attacker to read or modify another organization's tool metadata, posing a significant security risk.
HIGH 8.8CVE-2026-51914public exploit available2026-10-02
The flaw allows an attacker to bypass access controls and manipulate agent templates, potentially leading to unauthorized access or data manipulation within the system.
CRITICAL 9.8CVE-2026-51911public exploit available2026-10-02
The vulnerability in vanna v2.0.2 allows an attacker to inject code, potentially leading to remote code execution.
HIGH 8.1CVE-2026-51907public exploit available2026-10-02
The flaw allows attackers to write image files to arbitrary locations on the server filesystem via the project_id parameter, enabling unauthorized file manipulation.
CRITICAL 9.1CVE-2026-51906public exploit available2026-10-02
The flaw allows attackers to write downloaded images to arbitrary locations on the server filesystem via the project_id parameter, enabling unauthorized file manipulation.
CRITICAL 9.8CVE-2026-51904public exploit available2026-10-02
The flaw allows a remote authenticated attacker to create or start execution records for agents owned by another organization, leading to unauthorized access and potential control of sensitive operations.
HIGH 8.1CVE-2026-51901public exploit available2026-10-02
This vulnerability allows authenticated users to schedule agents from a different organization, bypassing access control checks, potentially leading to unauthorized control of agents.
MEDIUM 4.3CVE-2026-51899public exploit available2026-10-02
CRITICAL 9.8CVE-2026-51898public exploit available2026-10-02
The flaw allows code injection in CodeExecutor.execute, enabling attackers to execute arbitrary code on the server.
UNSCOREDCVE-2026-104914public exploit available2026-10-02
UNSCOREDCVE-2026-104912public exploit available2026-10-02
UNSCOREDCVE-2026-104910public exploit available2026-10-02
UNSCOREDCVE-2026-104908public exploit available2026-10-02
UNSCOREDCVE-2026-104907public exploit available2026-10-02
UNSCOREDCVE-2026-104906public exploit available2026-10-02
UNSCOREDCVE-2026-104901public exploit available2026-10-02
UNSCOREDCVE-2026-104900public exploit available2026-10-02
UNSCOREDCVE-2026-104847public exploit available2026-10-02
CRITICAL 9.8CVE-2026-104846public exploit available2026-10-02
This flaw allows attacker-controlled JSON to execute arbitrary code by deserializing a fulfilled Promise control node, which invokes a callable unexpectedly.
HIGH 7.5CVE-2026-104845public exploit available2026-10-02
The flaw allows attackers to cause excessive CPU and memory allocation by crafting malicious JSON data that specifies large array-like structures, leading to denial of service through event loop starvation.
MEDIUM 5.9CVE-2026-104844public exploit available2026-10-02
UNSCOREDCVE-2026-104843public exploit available2026-10-02
CRITICAL 9.1CVE-2026-1036482026-10-02
The flaw allows an attacker to traverse paths and write response data outside the intended directory, potentially leading to unauthorized access or data corruption.
HIGH 8.8CVE-2026-1036312026-10-02
A buffer overflow vulnerability in WebRTC within Google Chrome prior to 154.0.8037.97 allows remote attackers to execute arbitrary code within the sandbox via a specially crafted HTML page.
CRITICAL 9.6CVE-2026-1036302026-10-02
This flaw involves a use-after-free vulnerability in the Federated Credential Management (FedCM) component of Google Chrome prior to version 154.0.8037.97, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.