CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115805 | HIGH | 7.8 | 0.2% | Oct 29, 2026 | Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local use... |
| CVE-2026-107060 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anoth... |
| CVE-2026-107059 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch... |
| CVE-2026-107058 | CRITICAL | 9.8 | 0.5% | Oct 29, 2026 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another us... |
| CVE-2026-107057 | CRITICAL | 9.8 | 0.2% | Oct 29, 2026 | An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. |
| CVE-2026-107056 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized... |
| CVE-2026-107055 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to ... |
| CVE-2026-107053 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write a... |
| CVE-2026-107052 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack... |
| CVE-2026-107051 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arb... |
| CVE-2026-107050 | CRITICAL | 9.8 | 0.2% | Oct 29, 2026 | An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in the... |
| CVE-2026-107049 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply... |
| CVE-2026-107048 | CRITICAL | 9.8 | 0.2% | Oct 29, 2026 | An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute... |
| CVE-2026-107047 | HIGH | 7.5 | 0.4% | Oct 29, 2026 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap... |
| CVE-2026-107046 | MEDIUM | 5.3 | 0.2% | Oct 29, 2026 | A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows att... |
| CVE-2026-107045 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized atta... |
| CVE-2026-107044 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani... |
| CVE-2026-107043 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SM... |
| CVE-2025-12523 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user |
| CVE-2023-7357 | HIGH | 8.6 | 0.4% | Oct 29, 2026 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul... |
| CVE-2026-96203 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-96199 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net... |
| CVE-2026-96198 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net... |
| CVE-2026-96196 | HIGH | 8.8 | 0.8% | Oct 29, 2026 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a secu... |
| CVE-2026-96192 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network. |