CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-108494 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-107326 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107042 | HIGH | 7.5 | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized a… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107039 | HIGH | 7.5 | Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107037 | HIGH | 7.5 | Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allow… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107026 | HIGH | 7.5 | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-104328 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-104324 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-104317 | HIGH | 8.1 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message brok… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-103092 | HIGH | 8.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-101288 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-115713 | HIGH | 7.5 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115709 | HIGH | 8.2 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115708 | HIGH | 7.2 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-107020 | HIGH | 7.5 | An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 1… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-39736 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-119052 | HIGH | 7.5 | llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server th… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-119050 | HIGH | 8.1 | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119049 | HIGH | 7.6 | FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116399 | HIGH | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cr… |
T1190
T1203
|
|
2026-10-29 |