NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-81535 In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy c... 2026-10-07 6.3 NETWORK MEDIUM NVD
CVE-2026-16516 wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In Pars... 2026-10-07 9.0 NETWORK CRITICAL NVD
CVE-2026-106061 A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using ... 2026-10-07 5.5 LOCAL MEDIUM NVD
CVE-2026-106471 A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is acc... 2026-10-07 8.1 NETWORK HIGH NVD
CVE-2026-102478 In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse res... 2026-10-07 8.7 NETWORK HIGH NVD
CVE-2026-97680 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to impr... 2026-10-07 8.3 NETWORK HIGH NVD
CVE-2026-97679 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ... 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-97678 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-97676 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ... 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-97674 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of s... 2026-10-07 8.1 NETWORK HIGH NVD
CVE-2026-97673 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-97671 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerabilit... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-97655 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scan... 2026-10-07 8.8 NETWORK HIGH NVD
CVE-2026-93679 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumptio... 2026-10-07 4.3 NETWORK MEDIUM NVD
CVE-2026-93678 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. 2026-10-07 7.6 NETWORK HIGH NVD