NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-40458 PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, w... 2026-04-17 7.0 NETWORK HIGH NVD
CVE-2025-70795 STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate proces... 2026-04-17 5.5 LOCAL MEDIUM NVD
CVE-2026-6507 A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap ... 2026-04-17 7.5 NETWORK HIGH NVD
CVE-2026-6489 A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This issue affects some unknown processing of the... 2026-04-17 6.3 NETWORK MEDIUM NVD
CVE-2026-6488 A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This vulnerability affects unknown code of the file ad... 2026-04-17 6.3 NETWORK MEDIUM NVD
CVE-2026-6487 A flaw has been found in Qihui jtbc5 CMS 5.0.3.6. Affected is an unknown function of the file /dev/code/common/diplomat/manage.php of the component Co... 2026-04-17 4.3 NETWORK MEDIUM NVD
CVE-2026-6486 A vulnerability was detected in classroombookings up to 2.17.0. This impacts the function read of the file crbs-core/application/views/layout.php of t... 2026-04-17 3.5 NETWORK LOW NVD
CVE-2026-28263 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1... 2026-04-17 5.9 NETWORK MEDIUM NVD
CVE-2026-23777 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1... 2026-04-17 4.3 NETWORK MEDIUM NVD
CVE-2025-46641 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication... 2026-04-17 6.6 NETWORK MEDIUM NVD
CVE-2025-46607 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication... 2026-04-17 6.6 NETWORK MEDIUM NVD
CVE-2025-46606 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restriction of... 2026-04-17 6.2 NETWORK MEDIUM NVD
CVE-2025-46605 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnera... 2026-04-17 6.2 NETWORK MEDIUM NVD
CVE-2026-6483 A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. T... 2026-04-17 7.2 NETWORK HIGH NVD
CVE-2026-5131 GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are ... 2026-04-17 6.9 NETWORK MEDIUM NVD