The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107035: n/a: Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107034: n/a: Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read…N/AN/AN/AOct 29, 2026
CVE-2026-107033: n/a: Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows…N/AN/AN/AOct 29, 2026
CVE-2026-107032: n/a: Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an…N/AN/AN/AOct 29, 2026
CVE-2026-107030: n/a: Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger…N/AN/AN/AOct 29, 2026
CVE-2026-107029: n/a: Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading…N/AN/AN/AOct 29, 2026
CVE-2026-107028: n/a: Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an…N/AN/AN/AOct 29, 2026
CVE-2026-107027: n/a: Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an…N/AN/AN/AOct 29, 2026
CVE-2026-107026: n/a: Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily…N/AN/AN/AOct 29, 2026
CVE-2026-107025: n/a: Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export…N/AN/AN/AOct 29, 2026
CVE-2026-106036: Krajowa Izba Rozliczeniowa Szafir: Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS…N/A6.9 MediumN/AOct 29, 2026
CVE-2026-104339: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-104331: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)5.4 MediumN/AN/AOct 29, 2026
CVE-2026-104328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104324: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104317: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…8.1 HighN/AN/AOct 29, 2026
CVE-2026-104316: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104315: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104314: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104312: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive…3.5 LowN/AN/AOct 29, 2026
CVE-2026-104310: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104308: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-103092: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due…8.5 HighN/AN/AOct 29, 2026
CVE-2026-102590: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…5.0 MediumN/AN/AOct 29, 2026
176-200 of 538495