CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110881 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S... |
| CVE-2026-107024 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite anot... |
| CVE-2026-107023 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrari... |
| CVE-2026-107021 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows u... |
| CVE-2026-107020 | HIGH | 7.5 | — | Oct 29, 2026 | An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers ... |
| CVE-2026-107019 | HIGH | 8.8 | 0.2% | Oct 29, 2026 | Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthori... |
| CVE-2026-107018 | HIGH | 8.1 | 0.2% | Oct 29, 2026 | Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read a... |
| CVE-2026-107017 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers t... |
| CVE-2026-107016 | HIGH | 7.5 | 0.2% | Oct 29, 2026 | Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts. |
| CVE-2026-107015 | CRITICAL | 9.1 | — | Oct 29, 2026 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anot... |
| CVE-2026-107014 | CRITICAL | 9.1 | 0.2% | Oct 29, 2026 | Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read no... |
| CVE-2026-93010 | MEDIUM | 4.3 | 0.2% | Oct 29, 2026 | A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does n... |
| CVE-2026-93009 | MEDIUM | 4.3 | 0.2% | Oct 29, 2026 | A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option b... |
| CVE-2026-79589 | CRITICAL | 9.8 | 0.2% | Oct 29, 2026 | The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker... |
| CVE-2026-54862 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import a... |
| CVE-2026-48202 | MEDIUM | 5.3 | — | Oct 29, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-b... |
| CVE-2026-48195 | MEDIUM | 6.5 | — | Oct 29, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste... |
| CVE-2026-42707 | MEDIUM | 4.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Inc... |
| CVE-2026-39782 | MEDIUM | 5.3 | — | Oct 29, 2026 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access C... |
| CVE-2026-39736 | HIGH | 8.5 | — | Oct 29, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi... |
| CVE-2026-25467 | MEDIUM | 5.3 | — | Oct 29, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registrat... |
| CVE-2026-119054 | MEDIUM | 5.4 | 0.2% | Oct 29, 2026 | Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Cont... |
| CVE-2026-119053 | MEDIUM | 5.3 | — | Oct 29, 2026 | lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writ... |
| CVE-2026-119052 | HIGH | 7.5 | — | Oct 29, 2026 | llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenti... |
| CVE-2026-119051 | MEDIUM | 5.9 | 0.3% | Oct 29, 2026 | flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to cr... |