NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-42616 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary b... 2026-10-07 7.8 LOCAL HIGH NVD
CVE-2026-107194 Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "loc... 2026-10-07 9.2 NETWORK CRITICAL NVD
CVE-2026-107183 llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated remote atta... 2026-10-07 8.1 NETWORK HIGH NVD
CVE-2026-107181 Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: r... 2026-10-07 8.1 NETWORK HIGH NVD
CVE-2026-102258 Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in spe... 2026-10-07 6.1 NETWORK MEDIUM NVD
CVE-2026-102257 A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended d... 2026-10-07 7.2 NETWORK HIGH NVD
CVE-2026-98374 In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() When tcp_sen... 2026-10-07 N/A None None NVD
CVE-2026-98373 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables move_hugetlb... 2026-10-07 N/A None None NVD
CVE-2026-42532 A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially craft... 2026-10-07 5.5 LOCAL MEDIUM NVD
CVE-2026-41958 A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A special... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-107177 Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAu... 2026-10-07 5.9 NETWORK MEDIUM NVD
CVE-2026-107170 A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error... 2026-10-07 2.9 LOCAL LOW NVD
CVE-2026-107168 A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing functi... 2026-10-07 6.2 LOCAL MEDIUM NVD
CVE-2026-107162 Express Gateway through 1.16.11 contains an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant that fails to validate the token ... 2026-10-07 6.8 NETWORK MEDIUM NVD
CVE-2026-107151 Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks accep... 2026-10-07 5.9 NETWORK MEDIUM NVD