CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107048 | NONE | — | An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107047 | HIGH | 7.5 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrari… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107046 | NONE | — | A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast vers… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107045 | NONE | — | Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allo… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107044 | HIGH | 7.5 | Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107043 | NONE | — | Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily man… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2025-12523 | MEDIUM | 6.5 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to a… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2023-7357 | NONE | — | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-96203 | HIGH | 8.8 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-96199 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-96198 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-96196 | HIGH | 8.8 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attac… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-96192 | HIGH | 8.8 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a netw… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-96187 | HIGH | 7.4 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-93680 | CRITICAL | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-93571 | NONE | — | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who ca… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93570 | NONE | — | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user si… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-90991 | MEDIUM | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial … |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90872 | MEDIUM | 6.6 | Improper neutralization of directives in dynamically evaluated code in the Manager web console of Pr… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-90871 | MEDIUM | 5.3 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versi… |
T1078
T1548
|
|
2026-10-29 |