|
cve-2026-28859
|
SUSE CVE CVE-2026-28859 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-07-15 |
|
cve-2026-28857
|
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-28847
|
The issue was addressed with improved memory handling |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-28389
|
openssl: OpenSSL: Denial of Service vulnerability in CMS processing |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-28388
|
SUSE CVE CVE-2026-28388 |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-28369
|
A flaw was found in Undertow |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-28368
|
A flaw was found in Undertow |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-28367
|
A flaw was found in Undertow |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-11-04 |
|
cve-2026-26961
|
SUSE CVE CVE-2026-26961 |
LOW
|
3.7
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-2673
|
openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-07-22 |
|
cve-2026-25500
|
SUSE CVE CVE-2026-25500 |
MEDIUM
|
5.4
|
N/A
|
cvelistv5 |
2026-09-19 |
|
cve-2026-24880
|
Apache Tomcat: Request smuggling via invalid chunk extension |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-24733
|
SUSE CVE CVE-2026-24733 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-07-15 |
|
cve-2026-22860
|
SUSE CVE CVE-2026-22860 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-22796
|
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-22795
|
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing |
MEDIUM
|
5.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-22751
|
Vulnerability in Spring Spring Security |
MEDIUM
|
4.8
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-22746
|
Vulnerability in Spring Spring Security |
LOW
|
3.7
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-22745
|
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.
Mo... |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-22741
|
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precise... |
LOW
|
3.1
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-22740
|
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-22735
|
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events |
LOW
|
2.6
|
N/A
|
cvelistv5 |
2026-07-02 |
|
cve-2026-22702
|
SUSE CVE CVE-2026-22702 |
MEDIUM
|
4.5
|
N/A
|
cvelistv5 |
2026-07-15 |
|
cve-2026-21717
|
nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-08-19 |
|
cve-2026-21716
|
nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. |
LOW
|
3.8
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-21715
|
Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions |
LOW
|
3.3
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-21714
|
Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-21713
|
SUSE CVE CVE-2026-21713 |
MEDIUM
|
5.6
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2026-21712
|
SUSE CVE CVE-2026-21712 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-21710
|
SUSE CVE CVE-2026-21710 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-18 |
ndaal KEV