Security Vulnerabilities
CVE-2026-124194
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Known exploited
CVSS Score
6.5
Published
2026-11-10
CVE-2026-125350
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Known exploited
CVSS Score
8.8
Published
2026-11-10
IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk index, the attacker could also read the contents of arbitrary files accessible to the service process — including configuration files, secrets, or database files stored under the application's data directory.
CVSS Score
8.1
EPSS Score
0.004
Published
2026-11-08
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
CVSS Score
6.4
EPSS Score
0.003
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters.
CVSS Score
6.7
EPSS Score
0.007
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVSS Score
5.6
EPSS Score
0.003
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.
CVSS Score
3.1
EPSS Score
0.003
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests.
CVSS Score
6.5
EPSS Score
0.002
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVSS Score
3.1
EPSS Score
0.004
Published
2026-11-08
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
CVSS Score
5.0
EPSS Score
0.002
Published
2026-11-08
Page 1