NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadat... 2026-10-07 7.7 NETWORK HIGH NVD
CVE-2026-107229 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 unti... 2026-10-07 4.0 NETWORK MEDIUM NVD
CVE-2026-107228 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until... 2026-10-07 6.8 NETWORK MEDIUM NVD
CVE-2026-107227 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.2.0 until... 2026-10-07 7.5 NETWORK HIGH NVD
CVE-2026-97717 CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to ... 2026-10-07 6.0 NETWORK MEDIUM NVD
CVE-2026-97716 CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can s... 2026-10-07 8.7 NETWORK HIGH NVD
CVE-2026-97715 CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass... 2026-10-07 7.1 NETWORK HIGH NVD
CVE-2026-97714 CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malforme... 2026-10-07 8.2 NETWORK HIGH NVD
CVE-2026-34499 Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ... 2026-10-07 8.5 LOCAL HIGH NVD
CVE-2026-107353 traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution through set(... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-107176 A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch pe... 2026-10-07 6.8 ADJACENT_NETWORK MEDIUM NVD
CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer ne... 2026-10-07 7.5 NETWORK HIGH NVD
CVE-2026-107313 pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a v... 2026-10-07 4.2 NETWORK MEDIUM NVD
CVE-2026-107225 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extrac... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-107224 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high ... 2026-10-07 6.5 NETWORK MEDIUM NVD