NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-106445 Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.pro... 2026-10-06 9.2 NETWORK CRITICAL NVD
CVE-2026-106444 Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in... 2026-10-06 4.7 NETWORK MEDIUM NVD
CVE-2026-106063 A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path ... 2026-10-06 6.3 LOCAL MEDIUM NVD
CVE-2026-105244 Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space ... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105243 Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Wind... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105242 Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters trigg... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105241 Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, ... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105240 Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged con... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105239 Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ende... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-105111 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when y... 2026-10-06 4.7 NETWORK MEDIUM NVD
CVE-2026-104636 Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent raw Git op... 2026-10-06 7.5 NETWORK HIGH NVD
CVE-2026-104632 Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only... 2026-10-06 8.8 NETWORK HIGH NVD
CVE-2026-104626 A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting... 2026-10-06 8.8 NETWORK HIGH NVD
CVE-2026-104048 A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain... 2026-10-06 6.8 NETWORK MEDIUM NVD
CVE-2026-104047 A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory... 2026-10-06 5.3 LOCAL MEDIUM NVD