NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=chec... 2026-10-07 9.3 NETWORK CRITICAL NVD
CVE-2026-102781 Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through... 2026-10-07 6.9 NETWORK MEDIUM NVD
CVE-2025-64393 This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. 2026-10-07 9.4 NETWORK CRITICAL NVD
CVE-2025-64392 This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link. 2026-10-07 4.8 NETWORK MEDIUM NVD
CVE-2025-64391 This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when a... 2026-10-07 4.1 LOCAL MEDIUM NVD
CVE-2026-107121 A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is enabled, Keycloak fails to s... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-59347 VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a... 2026-10-07 8.1 LOCAL HIGH NVD
CVE-2026-59346 VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine w... 2026-10-07 9.3 LOCAL CRITICAL NVD
CVE-2026-103870 A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can s... 2026-10-07 5.0 NETWORK MEDIUM NVD
CVE-2026-103869 A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for e... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-103868 A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later do... 2026-10-07 6.5 NETWORK MEDIUM NVD
CVE-2026-19572 A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authenticatio... 2026-10-07 9.3 NETWORK CRITICAL NVD
CVE-2026-84897 src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and S... 2026-10-07 6.9 NETWORK MEDIUM NVD
CVE-2026-83742 Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated... 2026-10-07 5.3 NETWORK MEDIUM NVD
CVE-2026-83540 When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connectio... 2026-10-07 7.7 NETWORK HIGH NVD