CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 29/10/2026 |
| CVE-2026-107048 | CRITICAL9.8 | An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request. | 29/10/2026 |
| CVE-2026-107047 | HIGH7.5 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data. | 29/10/2026 |
| CVE-2026-107046 | MEDIUM5.3 | A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via supplying a crafted URL. | 29/10/2026 |
| CVE-2026-107045 | CRITICAL9.1 | Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database. | 29/10/2026 |
| CVE-2026-107044 | HIGH7.5 | Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism. | 29/10/2026 |
| CVE-2026-107043 | CRITICAL9.1 | Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism. | 29/10/2026 |
| CVE-2025-12523 | MEDIUM6.5 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user | 29/10/2026 |
| CVE-2023-7357 | HIGH8.6 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release. | 29/10/2026 |
| GHSA-vpp8-g58w-m8mp | HIGH7.5 | Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset | 29/10/2026 |
| GHSA-w9x9-j56r-h98r | HIGH8.2 | @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy | 29/10/2026 |
| GHSA-c33x-vcv4-vg3g | LOW | Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence | 29/10/2026 |
| CVE-2026-96203 | HIGH8.8 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | 29/10/2026 |
| CVE-2026-96199 | HIGH8.8 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 29/10/2026 |
| CVE-2026-96198 | HIGH8.8 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 29/10/2026 |
| CVE-2026-96196 | HIGH8.8 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | 29/10/2026 |
| CVE-2026-96192 | HIGH8.8 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network. | 29/10/2026 |