|
cve-2026-20691
|
webkitgtk: A maliciously crafted webpage may be able to fingerprint the user |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2026-20665
|
webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced |
MEDIUM
|
5.4
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2026-20664
|
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-20643
|
webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy |
MEDIUM
|
5.4
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2026-20060
|
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remot... |
MEDIUM
|
4.7
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-19931
|
SUSE CVE CVE-2026-19931 |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-15 |
|
cve-2026-1965
|
bad reuse of HTTP Negotiate connection |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-15 |
|
cve-2026-1940
|
Gstreamer: incomplete fix of cve-2026-1940 |
MEDIUM
|
5.1
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-19032
|
SUSE CVE CVE-2026-19032 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-18924
|
curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections |
LOW
|
3.7
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-18798
|
SUSE CVE CVE-2026-18798 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-19 |
|
cve-2026-18508
|
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite |
MEDIUM
|
4.4
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-18477
|
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape |
MEDIUM
|
4.4
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-1703
|
SUSE CVE CVE-2026-1703 |
LOW
|
3.1
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-15055
|
SUSE CVE CVE-2026-15055 |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-08-11 |
|
cve-2026-14682
|
SUSE CVE CVE-2026-14682 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-11 |
|
cve-2026-14457
|
openssl: RPK server signature algorithm selection can dereference a missing certificate |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-13608
|
curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack |
LOW
|
3.7
|
N/A
|
cvelistv5 |
2026-09-21 |
|
cve-2026-13586
|
bouncycastle: Bouncy Castle for Java: Denial of Service via PKCS#12 MAC and bag-decryption KDF iteration-count bound |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-28 |
|
cve-2026-13506
|
bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-28 |
|
cve-2026-13321
|
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's ... |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-11-02 |
|
cve-2026-13221
|
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect... |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-13204
|
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-11-02 |
|
cve-2026-12860
|
SUSE CVE CVE-2026-12860 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-11 |
|
cve-2026-12817
|
SUSE CVE CVE-2026-12817 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-11 |
|
cve-2026-12816
|
org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-05 |
|
cve-2026-12803
|
org.bouncycastle/bc-java: Bouncy Castle for Java: Authenticated Encryption Forgery Vulnerability |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-25 |
|
cve-2026-12802
|
bouncycastle: bcpkix-fips: Bouncy Castle for Java: Integrity compromise due to insufficient tag-length enforcement in CMS AuthEnvelopedData decryption. |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-12185
|
SUSE CVE CVE-2026-12185 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-11 |
|
cve-2026-11979
|
libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode |
LOW
|
1.8
|
N/A
|
cvelistv5 |
2026-10-25 |
ndaal KEV