|
cve-2026-41838
|
Spring Framework Predictable Session ID in WebSocket Module |
MEDIUM
|
4.8
|
N/A
|
cvelistv5 |
2026-07-23 |
|
cve-2026-41636
|
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings
This issue affects Apache Thrift: before 0.23... |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-41608
|
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.
Thi... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-41607
|
Out-of-bounds Read vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recom... |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-41606
|
Uncontrolled Recursion vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are r... |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-41605
|
SUSE CVE CVE-2026-41605 |
HIGH
|
7.3
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-41604
|
Out-of-bounds Read vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recom... |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-41602
|
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation
This issue... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-41001
|
spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-07-01 |
|
cve-2026-40992
|
Mail Auto-Configuration Does Not Enable SSL Hostname Verification |
MEDIUM
|
5.0
|
N/A
|
cvelistv5 |
2026-09-04 |
|
cve-2026-40542
|
Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCR... |
HIGH
|
7.3
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-39872
|
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-39044
|
cve-2026-39044 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
unknown |
|
cve-2026-3805
|
use after free in SMB connection reuse |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-14 |
|
cve-2026-3784
|
wrong proxy connection reuse with credentials |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-15 |
|
cve-2026-3783
|
token leak with redirect and netrc |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-15 |
|
cve-2026-34835
|
SUSE CVE CVE-2026-34835 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-34831
|
SUSE CVE CVE-2026-34831 |
MEDIUM
|
4.8
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-34830
|
rack: Rack: Information disclosure via regular expression injection in X-Accel-Mapping header |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-34829
|
SUSE CVE CVE-2026-34829 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-34827
|
rack: Rack: Denial of Service via crafted multipart/form-data requests |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-34826
|
SUSE CVE CVE-2026-34826 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-34786
|
SUSE CVE CVE-2026-34786 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-34785
|
github.com/rack/rack: Rack: Information disclosure via incorrect static file serving prefix check |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-34763
|
SUSE CVE CVE-2026-34763 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-34502
|
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client
This issue affects Apac... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-34483
|
Apache Tomcat: Incomplete escaping of JSON access logs |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-34230
|
SUSE CVE CVE-2026-34230 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-34183
|
SUSE CVE CVE-2026-34183 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-20 |
|
cve-2026-34181
|
SUSE CVE CVE-2026-34181 |
LOW
|
3.1
|
N/A
|
cvelistv5 |
2026-09-18 |
ndaal KEV