NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-106449 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false ... 2026-10-06 3.7 NETWORK LOW NVD
CVE-2026-106448 StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary Ja... 2026-10-06 8.9 NETWORK HIGH NVD
CVE-2026-106447 StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR ... 2026-10-06 8.7 NETWORK HIGH NVD
CVE-2026-106446 Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile... 2026-10-06 9.8 NETWORK CRITICAL NVD
CVE-2026-106445 Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.pro... 2026-10-06 9.2 NETWORK CRITICAL NVD
CVE-2026-106444 Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in... 2026-10-06 4.7 NETWORK MEDIUM NVD
CVE-2026-106063 A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path ... 2026-10-06 6.3 LOCAL MEDIUM NVD
CVE-2026-105244 Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space ... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105243 Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Wind... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105242 Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters trigg... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105241 Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, ... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105240 Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged con... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105239 Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ende... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105111 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when y... 2026-10-06 4.7 NETWORK MEDIUM NVD
CVE-2026-104636 Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent raw Git op... 2026-10-06 7.5 NETWORK HIGH NVD