NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-14990 IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arb... 2026-10-08 9.3 NETWORK CRITICAL NVD
CVE-2026-107615 An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute a... 2026-10-08 7.8 LOCAL HIGH NVD
CVE-2026-107614 An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user... 2026-10-08 6.1 LOCAL MEDIUM NVD
CVE-2026-107613 A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to... 2026-10-08 5.9 NETWORK MEDIUM NVD
CVE-2026-107612 Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter... 2026-10-08 7.8 LOCAL HIGH NVD
CVE-2026-107611 An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC se... 2026-10-08 7.1 NETWORK HIGH NVD
CVE-2026-103663 Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An ... 2026-10-08 9.4 NETWORK CRITICAL NVD
CVE-2026-44038 A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 all... 2026-10-08 4.4 LOCAL MEDIUM NVD
CVE-2026-44037 Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsr... 2026-10-08 5.5 LOCAL MEDIUM NVD
CVE-2026-44036 Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/... 2026-10-08 5.5 LOCAL MEDIUM NVD
CVE-2026-44035 Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of s... 2026-10-08 5.5 LOCAL MEDIUM NVD
CVE-2026-44034 A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up ... 2026-10-08 4.4 LOCAL MEDIUM NVD
CVE-2026-44033 Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.... 2026-10-08 5.5 LOCAL MEDIUM NVD
CVE-2026-44031 Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated ... 2026-10-08 7.5 NETWORK HIGH NVD
CVE-2026-16340 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remot... 2026-10-08 9.8 NETWORK CRITICAL NVD