CVE Finder & Vulnerability Intelligence
Search CVE records by CVE ID, product or keyword and filter by severity and vendor. CVSS scores, CISA KEV status and fixes, every entry linked to its official source.
Langflow Langflow >= 1.0.0, < 1.12.3
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.
Wolfssh Wolfssh < 1.6.0
In wolfSSH through 1.5.0 built with –enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make…
Splunk Splunk >= 9.4.0, < 9.4.15
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally…
Apache Jackrabbit >= 2.20.0, < 2.20.18
: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue…
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release…
Dell Container Storage Modules < 1.18.0
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this…
Payloadcms Payload >= 3.0.0, < 3.90.0
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name…
Jetbrains Teamcity < 2025.11.7
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
Dell Container Storage Modules < 1.18.0
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax – csireverseproxy . An unauthenticated attacker with adjacent network access could potentially…