NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-27568 WWBN AVideo is an open source video platform. Prior to version 21.0, AVideo allows Markdown in video comments and uses Parsedown (v1.7.4) without Safe... 2026-02-24 6.1 NETWORK MEDIUM NVD
CVE-2026-27567 Payload is a free and open source headless content management system. Prior to 3.75.0, a Server-Side Request Forgery (SSRF) vulnerability exists in Pa... 2026-02-24 6.5 NETWORK MEDIUM NVD
CVE-2026-27483 MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in... 2026-02-24 8.8 NETWORK HIGH NVD
CVE-2026-27208 bleon-ethical/api-gateway-deploy provides API gateway deployment. Version 1.0.0 is vulnerable to an attack chain involving OS Command Injection and Pr... 2026-02-24 9.2 LOCAL CRITICAL NVD
CVE-2026-0402 A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. 2026-02-24 4.9 NETWORK MEDIUM NVD
CVE-2026-0401 A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. 2026-02-24 4.9 NETWORK MEDIUM NVD
CVE-2026-0400 A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. 2026-02-24 4.9 NETWORK MEDIUM NVD
CVE-2026-0399 Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API ... 2026-02-24 4.9 NETWORK MEDIUM NVD
CVE-2025-67445 TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENT_LENGTH environme... 2026-02-24 7.5 NETWORK HIGH NVD
CVE-2025-10010 The CPSD CryptoPro Secure Disk application boots a small Linux operating system to perform user authentication before using BitLocker to decrypt the W... 2026-02-24 6.8 PHYSICAL MEDIUM NVD
CVE-2026-2807 Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough... 2026-02-24 9.8 NETWORK CRITICAL NVD
CVE-2026-2806 Uninitialized memory in the Graphics: Text component. This vulnerability affects Firefox < 148 and Thunderbird < 148. 2026-02-24 9.1 NETWORK CRITICAL NVD
CVE-2026-2805 Invalid pointer in the DOM: Core & HTML component. This vulnerability affects Firefox < 148 and Thunderbird < 148. 2026-02-24 9.8 NETWORK CRITICAL NVD
CVE-2026-2804 Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 148 and Thunderbird < 148. 2026-02-24 5.4 NETWORK MEDIUM NVD
CVE-2026-2803 Information disclosure, mitigation bypass in the Settings UI component. This vulnerability affects Firefox < 148 and Thunderbird < 148. 2026-02-24 7.5 NETWORK HIGH NVD