|
cve-2026-75595
|
SUSE CVE CVE-2026-75595 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-75140
|
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTree... |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-10-18 |
|
cve-2026-74994
|
inets: otp: inets httpd mod_auth: Authentication Bypass via Directory Namespace Collapse |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-74860
|
cve-2026-74860 |
HIGH
|
8.5
|
N/A
|
cvelistv5 |
unknown |
|
cve-2026-74835
|
inets: httpd: otp: inets httpd: Denial of Service due to memory exhaustion via unenforced body-size limit |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-73964
|
Vulnerability in the RDBMS component of Oracle Database Server |
LOW
|
2.7
|
N/A
|
cvelistv5 |
2026-10-27 |
|
cve-2026-73812
|
OTP: inets: inets: HTTP Request Smuggling allows bypassing security controls |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-73507
|
SUSE CVE CVE-2026-73507 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-08-14 |
|
cve-2026-73180
|
tomcat: Apache Tomcat: Authenticated WebSocket session persists after HTTP session termination |
MEDIUM
|
5.4
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-7168
|
curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-71497
|
jsoup is a Java library for working with real-world HTML |
MEDIUM
|
4.7
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-70869
|
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker) |
MEDIUM
|
4.7
|
N/A
|
cvelistv5 |
2026-10-27 |
|
cve-2026-70860
|
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: ePro... |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-10-27 |
|
cve-2026-69249
|
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-10-23 |
|
cve-2026-69248
|
SUSE CVE CVE-2026-69248 |
MEDIUM
|
5.4
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2026-68763
|
org.apache.tomcat/tomcat: Apache Tomcat: Denial of Service via HTTP/2 allocation leak |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-68569
|
tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-68525
|
org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-68497
|
SUSE CVE CVE-2026-68497 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-10 |
|
cve-2026-68494
|
SUSE CVE CVE-2026-68494 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-08-06 |
|
cve-2026-6790
|
In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host a... |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-6732
|
libxml2: libxml2: Denial of Service via crafted XSD-validated document |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-6653
|
SUSE CVE CVE-2026-6653 |
MEDIUM
|
5.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-66422
|
tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraints |
LOW
|
2.7
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-66357
|
otp: inets: Erlang/OTP inets: HTTP Request Smuggling via improper header parsing |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-10-16 |
|
cve-2026-66144
|
Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via t... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-66143
|
It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-66142
|
Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply neste... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-66010
|
DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HA... |
MEDIUM
|
5.1
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-65927
|
tomcat: Apache Tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-09-03 |
ndaal KEV