NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-102576 A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting (XSS). Becaus... 2026-10-05 4.2 NETWORK MEDIUM NVD
CVE-2026-102295 A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaS... 2026-10-05 5.4 NETWORK MEDIUM NVD
CVE-2026-101919 A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the privile... 2026-10-05 8.8 NETWORK HIGH NVD
CVE-2026-86671 In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to `UR... 2026-10-05 8.4 NETWORK HIGH NVD
CVE-2026-78412 Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions agains... 2026-10-05 4.9 NETWORK MEDIUM NVD
CVE-2026-102779 Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes ... 2026-10-05 6.9 NETWORK MEDIUM NVD
CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos pick... 2026-10-05 6.3 NETWORK MEDIUM NVD
CVE-2026-102780 Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditio... 2026-10-05 6.9 NETWORK MEDIUM NVD
CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a share... 2026-10-05 5.3 NETWORK MEDIUM NVD
CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the ... 2026-10-05 5.1 NETWORK MEDIUM NVD
CVE-2026-102775 Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-f... 2026-10-05 8.7 NETWORK HIGH NVD
CVE-2026-102428 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and n... 2026-10-05 9.3 NETWORK CRITICAL NVD
CVE-2026-102426 Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and ... 2026-10-05 5.3 NETWORK MEDIUM NVD
CVE-2026-88391 Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/**, so /h... 2026-10-05 9.8 NETWORK CRITICAL NVD
CVE-2026-79820 A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. 2026-10-05 9.0 NETWORK CRITICAL NVD