NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2025-71409 Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misle... 2026-08-07 7.1 NETWORK HIGH NVD
CVE-2025-63235 In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients sen... 2026-08-07 7.5 NETWORK HIGH NVD
CVE-2026-66058 Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follow API (update_follow) is possi... 2026-08-07 5.3 NETWORK MEDIUM NVD
CVE-2026-64638 WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted... 2026-08-07 8.9 NETWORK HIGH NVD
CVE-2026-64637 Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the... 2026-08-07 N/A None None NVD
CVE-2026-64636 An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the pane... 2026-08-07 7.7 NETWORK HIGH NVD
CVE-2026-56818 Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec cl... 2026-08-07 6.5 NETWORK MEDIUM NVD
CVE-2026-47364 In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing op... 2026-08-07 6.5 NETWORK MEDIUM NVD
CVE-2026-47363 In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (i... 2026-08-07 6.3 NETWORK MEDIUM NVD
CVE-2026-47362 In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotifi... 2026-08-07 4.6 PHYSICAL MEDIUM NVD
CVE-2026-47361 In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent ... 2026-08-07 6.4 NETWORK MEDIUM NVD
CVE-2026-44965 In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewW... 2026-08-07 5.5 LOCAL MEDIUM NVD
CVE-2026-44964 In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-ins... 2026-08-07 6.5 NETWORK MEDIUM NVD
CVE-2026-19082 Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_st... 2026-08-07 7.5 NETWORK HIGH NVD
CVE-2026-71557 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before bei... 2026-08-07 6.3 NETWORK MEDIUM NVD