NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-102523 MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVER... 2026-11-05 8.0 NETWORK HIGH NVD
CVE-2020-9709 Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. Successful exploitation could lead to privilege e... 2026-11-05 8.8 NETWORK HIGH NVD
CVE-2019-16447 Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead to local code execution. 2026-11-05 7.8 LOCAL HIGH NVD
CVE-2026-82894 Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to trigger arb... 2026-11-05 7.5 NETWORK HIGH NVD
CVE-2026-81828 Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated back-office user holding c... 2026-11-05 8.1 NETWORK HIGH NVD
CVE-2026-81816 XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker hol... 2026-11-05 3.5 NETWORK LOW NVD
CVE-2026-81815 SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a re... 2026-11-05 9.8 NETWORK CRITICAL NVD
CVE-2026-81808 Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding onl... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-81744 Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker hol... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-81734 Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only cata... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-76152 Path traversal and missing authorization check in the imageCrop and imageRotate services in Apache OFBiz through 24.09.07 on all platforms allows a re... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-76150 Path traversal and missing authorization check in the replaceImageToExistImage service in Apache OFBiz through 24.09.07 on all platforms allows a remo... 2026-11-05 6.5 NETWORK MEDIUM NVD
CVE-2026-74841 In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-supplied userTenantId parameter and request... 2026-11-05 9.1 NETWORK CRITICAL NVD
CVE-2026-73580 Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on all platforms allows a remote unauthenticated attacker to re... 2026-11-05 5.3 NETWORK MEDIUM NVD
CVE-2026-73578 Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated ... 2026-11-05 7.5 NETWORK HIGH NVD