CVE ID :CVE-2024-58366 Published : July 18, 2026, 2:17 p.m. | 5 hours, 4 minutes ago Description :SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string…
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was…
CVE ID :CVE-2026-9103 Published : July 17, 2026, 6:49 p.m. | 25 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues…
CVE ID :CVE-2026-9135 Published : July 17, 2026, 6:48 p.m. | 25 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies component’s ToolGuard integration that bypasses…
CVE ID :CVE-2026-9198 Published : July 17, 2026, 6:17 p.m. | 57 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec())…
CVE ID :CVE-2026-9202 Published : July 17, 2026, 6:17 p.m. | 57 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly created accounts…
CVE ID :CVE-2026-46686 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :Emlog is an open source website building system. In 2.6.13 and earlier, the admin backend user search module’s keyword parameter from admin is processed with addslashes…
CVE ID :CVE-2026-45336 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key…
CVE ID :CVE-2021-27137 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :An issue was discovered in router in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a…
CVE ID :CVE-2026-63087 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the…