CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107023 | MEDIUM | 6.5 | Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized at… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107021 | NONE | — | Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCo… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107020 | HIGH | 7.5 | An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 1… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-107019 | NONE | — | Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107018 | NONE | — | Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers t… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107017 | CRITICAL | 9.1 | Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unau… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107016 | NONE | — | Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107015 | CRITICAL | 9.1 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write an… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-107014 | NONE | — | Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers … |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-93010 | MEDIUM | 4.3 | A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresse… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-93009 | MEDIUM | 4.3 | A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a c… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-79589 | NONE | — | The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw tha… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-54862 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-48202 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-48195 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-42707 | MEDIUM | 4.3 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings a… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39782 | MEDIUM | 5.3 | Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-39736 | HIGH | 8.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-29 |
| CVE-2026-25467 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Theme… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-119054 | MEDIUM | 5.4 | Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerabil… |
T1190
T1203
|
|
2026-10-29 |