NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-76747 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to ex... 2026-10-06 9.1 NETWORK CRITICAL NVD
CVE-2026-76746 An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose s... 2026-10-06 9.3 ADJACENT_NETWORK CRITICAL NVD
CVE-2026-76745 Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an at... 2026-10-06 9.6 ADJACENT_NETWORK CRITICAL NVD
CVE-2026-76744 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to ex... 2026-10-06 9.8 NETWORK CRITICAL NVD
CVE-2026-76743 A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumven... 2026-10-06 9.8 NETWORK CRITICAL NVD
CVE-2026-76742 Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote at... 2026-10-06 9.8 NETWORK CRITICAL NVD
CVE-2026-76741 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to caus... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-76061 A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local attacke... 2026-10-06 5.5 NETWORK MEDIUM NVD
CVE-2026-73278 Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A pa... 2026-10-06 9.8 NETWORK CRITICAL NVD
CVE-2026-70357 Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently re... 2026-10-06 7.5 NETWORK HIGH NVD
CVE-2026-106454 Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp() in twisted/mail/imap4... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-106453 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decomp... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-106452 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen fiel... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-106451 yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclu... 2026-10-06 7.3 LOCAL HIGH NVD
CVE-2026-106450 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buf... 2026-10-06 5.3 NETWORK MEDIUM NVD