CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107328 | HIGH | 8.8 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to impro... |
| CVE-2026-107327 | HIGH | 8.8 | 0.7% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missi... |
| CVE-2026-107326 | HIGH | 8.8 | 0.7% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to impro... |
| CVE-2026-107042 | HIGH | 7.5 | — | Oct 29, 2026 | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or ... |
| CVE-2026-107041 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized a... |
| CVE-2026-107040 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component... |
| CVE-2026-107039 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080... |
| CVE-2026-107038 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exporte... |
| CVE-2026-107037 | HIGH | 7.5 | — | Oct 29, 2026 | Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attac... |
| CVE-2026-107036 | MEDIUM | 5.1 | 0.2% | Oct 29, 2026 | Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an expo... |
| CVE-2026-107035 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unau... |
| CVE-2026-107034 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read ano... |
| CVE-2026-107033 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorize... |
| CVE-2026-107032 | CRITICAL | 9.1 | — | Oct 29, 2026 | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an e... |
| CVE-2026-107030 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger ... |
| CVE-2026-107029 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to... |
| CVE-2026-107028 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an export... |
| CVE-2026-107027 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported... |
| CVE-2026-107026 | HIGH | 7.5 | — | Oct 29, 2026 | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwri... |
| CVE-2026-107025 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export t... |
| CVE-2026-106036 | MEDIUM | 6.9 | 0.2% | Oct 29, 2026 | Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c... |
| CVE-2026-104339 | CRITICAL | 9.8 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutraliza... |
| CVE-2026-104331 | MEDIUM | 5.4 | 0.2% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat... |
| CVE-2026-104328 | HIGH | 8.8 | — | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro... |
| CVE-2026-104324 | HIGH | 8.8 | 0.6% | Oct 29, 2026 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deser... |