NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misint... 2026-11-05 8.1 NETWORK HIGH NVD
CVE-2026-123125 The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal ad... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-123096 anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker/http package that allows malicious trackers to crash client... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-123095 mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked ent... 2026-11-05 7.5 NETWORK HIGH NVD
CVE-2026-123094 Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display n... 2026-11-05 5.4 NETWORK MEDIUM NVD
CVE-2026-122330 Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to cra... 2026-11-05 5.5 LOCAL MEDIUM NVD
CVE-2026-122329 SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when exp... 2026-11-05 7.8 LOCAL HIGH NVD
CVE-2026-122328 SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law W... 2026-11-05 7.8 LOCAL HIGH NVD
CVE-2026-122324 SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbit... 2026-11-05 3.1 NETWORK LOW NVD
CVE-2026-121139 The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption ... 2026-11-05 7.8 LOCAL HIGH NVD
CVE-2026-115740 Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the Ope... 2026-11-05 4.3 NETWORK MEDIUM NVD
CVE-2026-115739 Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt creden... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-107891 musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect alloc... 2026-11-05 8.1 NETWORK HIGH NVD
CVE-2026-104269 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's ... 2026-11-05 8.6 NETWORK HIGH NVD
CVE-2026-103932 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 impl... 2026-11-05 5.8 NETWORK MEDIUM NVD